Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in Campinas
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated activity that calls for a mix of real-word experience, IT skills and business savvy. It also requires close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Because the top priority of the ransomware victim is fast recovery, it is critical to establish response groups that work efficiently, in parallel, and in close communication. Progent has the breadth of IT skills and the deep bench of experts to supplement your IT staff and recover your network environment rapidly and economically.

Services available from Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware used in the assault
• Identifying and contacting the hacker persona
• Assessing the recovery risk
• Verifying the TA's decryption tool
• Deciding on an acceptable settlement with the victim and the insurance provider
• Establishing a settlement amount and timeline with the hacker
• Confirming compliance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the TA
• Acquiring, learning, and using the TA's decryptor tool
• If needed, contacting the hacker for technical help with the decryptor utility

• Quarantining affected endpoints and data stores to arrest the spread of the assault
• Creating digital copies of each compromised server and endpoint and data store to allow forensics without interfering with recovery
• Installing anti-virus protection to all clean endpoints
• Restoring data from air-gapped restores or unscathed endpoints
• Building a clean recovery environment
• Mapping and reconnecting drives to reflect exactly their pre-attack condition

Exfiltration Ransoms
Beyond demanding money for a decryption tool, current strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate files. TAs are then able to require an extra settlement for not divulging this data on the dark web. Sadly, there exists no method to prove that stolen data have been completely deleted by the TA. In fact, in many instances the threat actor has limited control about where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy lawyers, performing an audit on which files were stolen, and sending the required notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises IT services across the U.S. for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security experts have earned industry-recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial management and ERP application software. This breadth of skills allows Progent to salvage and integrate the surviving parts of your network after a ransomware assault and rebuild them quickly into an operational network. Progent has worked with top cyber insurance providers including Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Campinas
To get in touch with Progent about ransomware settlement expertise in Campinas, phone Progent at 800-462-8800 or go to Contact Progent.