Ransomware Solutions Consulting Experts

Progent's Ransomware Negotiation Consulting in Ipanema
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated exercise that requires a combination of field experience, IT knowledge and business acumen. It also requires close co-operation with the ransomware victim's IT team and the insurance provider, if there is one. Because the top goal of the ransomware target is operational continuity, it is vital to establish recovery teams that work effectively, in parallel, and with intimate collaboration. Progent offers the breadth of technical knowledge and the depth of personnel to complement your network support team and recover your network rapidly and economically.

Support available from Progent's ransomware settlement experts include:

• Establishing the type of ransomware involved in the attack
• identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Verifying the TA's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying adherence to anti-money laundering regulations
• Overseeing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the TA's decryptor mechanism
• If needed, contacting the hacker for assistance with the decryptor utility

• Quarantining infected endpoints to arrest the spread of the attack
• Creating digital copies of each breached device and data store to allow forensics without interfering with recovery
• Adding anti-virus protection to all clean endpoints
• Restoring files from offline restores or unscathed endpoints
• Building a pristine environment
• Mapping and reconnecting drives to match exactly their pre-encryption state

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, current variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") information. TAs are then able to demand an extra settlement in exchange for not divulging this data on the dark web. Sadly, there exists no method to prove that stolen data have been totally deleted by the hacker. Actually, in numerous cases the threat actor has limited say over who can access the stolen files. Settling an exfiltration ransom does not free you from the necessity of getting the guidance of privacy attorneys, performing an investigation into which data were taken, and carrying out the required alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services across the United States for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security experts have earned prestigious certifications such as CISM, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also offers guidance in financial and ERP software. This breadth of expertise gives Progent the ability to salvage and consolidate the surviving pieces of your IT environment following a ransomware assault and reconstruct them rapidly into an operational network. Progent has worked with leading insurance carriers like Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Ipanema
To get in touch with Progent about ransomware settlement negotiation expertise in Ipanema, call Progent at 800-462-8800 or go to Contact Progent.