Ransomware Solutions Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Brasília
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complicated exercise that calls for a combination of real-word experience, technical skills and business savvy. It also requires close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if there is one. Since the top goal of the ransomware target is operational continuity, it is vital to establish response groups that work effectively, in parallel, and with intimate collaboration. Progent offers the scope of IT skills and the deep bench of experts to complement your IT support team and recover your network rapidly and economically.

Services offered by Progent's ransomware negotiation experts include:

• Determining the type of ransomware used in the assault
• identifying and contacting the hacker persona
• Assessing the recovery risk
• Verifying the hacker's decryption tool
• Agreeing on a settlement payment with the victim and the insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Checking accordance with anti-money laundering sanctions
• Managing the crypto-currency transfer to the hacker
• Acquiring, learning, and operating the threat actor's decryption tool
• If needed, contacting the threat actor for technical assistance with the decryptor tool

• Quarantining infected endpoints and data stores to prevent further progress of the attack
• Making replicas of each compromised device and data store to allow forensics without interfering with cleanup
• Adding A/V protection to all virus-free endpoints
• Restoring files from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Mapping and reconnecting drives to match exactly their pre-encryption condition

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") information. Hackers can then require an additional settlement in exchange for not divulging this information on the dark web. Unfortunately, there is no method to prove that stolen data have been completely deleted by the threat actor. Actually, in numerous instances the threat actor has limited say over the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of seeking the advice of privacy lawyers, conducting an investigation into which files were compromised, and performing the necessary notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services throughout the United States for over 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware, and major Linux distros. Progent's data security consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, and CRISC. (See Progent's certifications). Progent also has top-tier support in financial and ERP software. This scope of skills allows Progent to identify and integrate the undamaged parts of your information system after a ransomware assault and rebuild them quickly into a functioning system. Progent has worked with leading insurance carriers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Brasília
To get in touch with Progent about ransomware settlement guidance in Brasília, phone Progent at 800-462-8800 or go to Contact Progent.