Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Brasília
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated exercise that calls for a combination of field experience, IT knowledge and business savvy. It also requires close co-operation with the cyber-extortion target's IT staff and the insurance provider, if there is one. Because the number one goal of the ransomware victim is operational continuity, it is critical to establish recovery groups that operate effectively, concurrently, and with intimate collaboration. Progent offers the breadth of IT knowledge and the depth of experts to supplement your IT staff and recover your network quickly and affordably.

Services available from Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the assault
• identifying and contacting the hacker
• Assessing the recovery risk
• Verifying the threat actor's decryption tool
• Deciding on an acceptable settlement amount with the ransomware victim and the insurance provider
• Negotiating a settlement amount and timeline with the TA
• Checking compliance with anti-money laundering sanctions
• Overseeing the crypto-currency payment to the hacker
• Receiving, learning, and operating the TA's decryption utility
• If necessary, contacting the hacker for technical help with the decryptor utility

• Quarantining affected endpoints and data stores to prevent further spread of the attack
• Creating digital copies of every breached server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing A/V protection to all clean endpoints
• Recovering files from offline restores or uncompromised machines
• Creating a clean recovery environment
• Remapping and connecting datastores to reflect precisely their pre-encryption state

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, current variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to exfiltrate files. TAs are then able to demand a separate payment in exchange for not posting this information on the dark web. Unfortunately, there exists no method to prove that exfiltrated files have been completely erased by the threat actor. Actually, in many instances the TA has little control about who can access the stolen files. Settling an exfiltration ransom does not eliminate the need for engaging the advice of legal counsel, conducting an investigation into which data were stolen, and sending the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises IT services across the U.S. for more than 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned advanced certifications in core technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications including CISM, CISSP, and GIAC. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP application software. This breadth of skills allows Progent to salvage and consolidate the undamaged pieces of your IT environment after a ransomware attack and rebuild them quickly into an operational system. Progent has worked with top cyber insurance carriers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Brasília
To contact with Progent about ransomware settlement expertise in Brasília, call Progent at 800-462-8800 or go to Contact Progent.