Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Ipanema
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex exercise that calls for a mix of field experience, technical knowledge and business savvy. It also calls for close co-operation with the victim's IT team and the insurance provider, if any. Because the top priority of the ransomware target is operational continuity, it is critical to deploy recovery teams that operate efficiently, in parallel, and in close communication. Progent has the breadth of technical knowledge and the deep bench of personnel to complement your IT support team and restore your network quickly and affordably.

Services provided by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware used in the assault
• making contact with the hacker
• Assessing the likelihood of recovery
• Testing the TA's decryption tool
• Deciding on an acceptable settlement payment with the victim and the cyber insurance carrier
• Establishing a settlement and timeline with the threat actor
• Verifying compliance with anti-money laundering sanctions
• Carrying out the crypto-currency disbursement to the TA
• Acquiring, learning, and operating the hacker's decryption tool
• If needed, contacting the hacker for technical help with the decryption tool

• Quarantining affected endpoints to prevent further spread of the attack
• Making digital copies of each infected server and endpoint and data store to allow forensics in parallel with cleanup
• Adding A/V protection to all clean endpoints
• Restoring files from offline restores or unscathed machines
• Creating a pristine recovery environment
• Mapping and connecting datastores to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to exfiltrate files. TAs are then able to demand an extra payment in exchange for not publishing this information on the dark web. Unfortunately, there exists no method to prove that exfiltrated files have been totally deleted by the TA. In fact, in numerous instances the hacker has little control about the disposition of the data. Settling an exfiltration ransom does not eliminate the need for engaging the advice of privacy lawyers, performing an audit on which data were compromised, and performing the mandated alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and on-premises network services across the U.S. for more than 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have earned high-level certifications in core technology platforms including Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP-ISSAP, and CRISC. (See Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning applications. This broad array of expertise allows Progent to salvage and integrate the undamaged parts of your network following a ransomware intrusion and rebuild them quickly into an operational system. Progent has collaborated with leading insurance carriers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Ipanema
To contact with Progent about ransomware settlement negotiation guidance in Ipanema, phone Progent at 800-462-8800 or go to Contact Progent.