Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Brisbane
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that requires a combination of field experience, technical skills and business acumen. It also calls for working closely with the victim's IT staff and the cyber insurance carrier, if there is one. Since the top priority of the ransomware victim is operational continuity, it is critical to establish recovery teams that work effectively, in parallel, and in close communication. Progent offers the breadth of IT knowledge and the depth of personnel to complement your IT support team and restore your network rapidly and affordably.

Services provided by Progent's ransomware settlement team include:

• Establishing the kind of ransomware involved in the attack
• Making contact with the hacker
• Assessing the recovery risk
• Testing the threat actor's decryption tool
• Budgeting a settlement with the victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the TA
• Verifying compliance with anti-money laundering sanctions
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, learning, and operating the TA's decryption mechanism
• If necessary, contacting the threat actor for technical assistance with the decryption utility

• Quarantining infected endpoints and data stores to prevent further spread of the attack
• Creating digital copies of each infected server and endpoint and data store in order to perform forensics in parallel with cleanup
• Adding A/V agents to all virus-free endpoints
• Salvaging files from air-gapped backups or unscathed machines
• Creating a pristine environment
• Remapping and connecting drives to match exactly their pre-encryption state

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate information. Hackers can then demand an extra settlement in exchange for not divulging this data or selling it. Unfortunately, there is no method to guarantee that stolen files have been completely deleted by the hacker. Actually, in many instances the threat actor has limited say about data custody. Paying an exfiltration ransom does not free you from the need for seeking the guidance of privacy lawyers, conducting an audit on which data were stolen, and carrying out the required notifications to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and on-premises network services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded high-level certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial management and ERP applications. This breadth of expertise gives Progent the ability to identify and consolidate the undamaged parts of your network following a ransomware intrusion and reconstruct them rapidly into a functioning system. Progent has worked with top insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Brisbane
To contact with Progent about crypto-ransomware settlement services in Brisbane, call Progent at 800-462-8800 or go to Contact Progent.