Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Cabo Frio
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated exercise that calls for a combination of field experience, technical skills and business savvy. It also calls for working closely with the victim's IT staff and the cyber insurance carrier, if any. Because the top priority of the ransomware victim is fast recovery, it is vital to establish recovery teams that operate efficiently, concurrently, and with intimate collaboration. Progent has the scope of technical skills and the depth of personnel to complement your network staff and recover your network environment quickly and affordably.

Support available from Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Verifying the TA's decryption capabilities
• Determining a settlement payment with the victim and the insurance carrier
• Negotiating a settlement amount and schedule with the TA
• Verifying adherence to anti-money laundering sanctions
• Managing the crypto-currency payment to the hacker
• Acquiring, learning, and operating the TA's decryption mechanism
• If needed, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining infected endpoints and data stores to prevent further spread of the assault
• Making replicas of each compromised server and endpoint and data store in order to perform forensics in parallel with restoration
• Adding anti-virus protection to all virus-free endpoints
• Restoring files from offline backups or unscathed endpoints
• Building a clean environment
• Mapping and connecting datastores to reflect exactly their pre-attack state

Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate files. Hackers can then demand a separate payment in exchange for not publishing this information or selling it. Unfortunately, there exists no method to guarantee that stolen files have been completely erased by the hacker. In fact, in numerous cases the TA has little control about where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of engaging the advice of privacy lawyers, conducting an audit on which files were compromised, and sending the mandated alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in core technology platforms such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and Enterprise Resource Planning application software. This broad array of expertise gives Progent the ability to salvage and consolidate the undamaged parts of your IT environment following a ransomware assault and reconstruct them quickly into a functioning system. Progent has collaborated with top insurance carriers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Cabo Frio
To get in touch with Progent about crypto-ransomware settlement expertise in Cabo Frio, call Progent at 800-462-8800 or go to Contact Progent.