Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Cabo Frio
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complex exercise that calls for a mix of field experience, IT knowledge and business acumen. It also calls for working closely with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Because the top priority of the ransomware victim is fast recovery, it is critical to establish recovery teams that work effectively, in parallel, and with intimate collaboration. Progent has the scope of IT skills and the deep bench of personnel to supplement your network staff and restore your network quickly and affordably.

Support available from Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware used in the attack
• identifying and contacting the hacker
• Assessing the recovery risk
• Testing the threat actor's decryption capabilities
• Agreeing on a settlement range with the victim and the insurance provider
• Negotiating a settlement and timeline with the threat actor
• Confirming accordance with anti-money laundering laws
• Overseeing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the hacker's decryption utility
• If necessary, contacting the TA for technical assistance with the decryptor tool

• Quarantining infected endpoints to prevent further spread of the assault
• Creating digital copies of each breached device and data store in order to perform forensics in parallel with recovery
• Installing anti-virus agents to all clean endpoints
• Recovering files from air-gapped restores or uncompromised endpoints
• Creating a clean environment
• Mapping and reconnecting drives to match precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly try to exfiltrate files. TAs can then demand an additional ransom for not publishing this information or selling it. Unfortunately, there exists no way to prove that exfiltrated data have been completely erased by the TA. In fact, in numerous cases the threat actor has limited control over where the information ends up. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of privacy attorneys, performing an inventory of files were compromised, and performing the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and onsite IT services throughout the United States for over two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have been awarded high-level certifications in foundation technologies such as Cisco networking, VMware, and popular distributions of Linux. Progent's data security experts have earned industry-recognized certifications such as CISM, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP software. This scope of skills allows Progent to salvage and integrate the undamaged pieces of your information system after a ransomware intrusion and rebuild them rapidly into a viable network. Progent has collaborated with leading insurance providers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Cabo Frio
To contact with Progent about ransomware settlement guidance in Cabo Frio, call Progent at 800-462-8800 or go to Contact Progent.