Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Brasília
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that calls for a combination of real-word experience, IT skills and business acumen. It also demands close co-operation with the ransomware victim's IT team and the insurance carrier, if any. Because the number one goal of the ransomware target is operational continuity, it is vital to establish recovery groups that operate effectively, concurrently, and with intimate collaboration. Progent offers the breadth of IT skills and the deep bench of personnel to complement your IT staff and restore your network quickly and economically.

Services offered by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the attack
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Agreeing on a settlement range with the victim and the cyber insurance provider
• Negotiating a settlement and schedule with the TA
• Confirming accordance with anti-money laundering sanctions
• Managing the crypto-currency transfer to the TA
• Receiving, learning, and operating the hacker's decryption tool
• If necessary, contacting the threat actor for technical help with the decryption tool

• Quarantining infected endpoints and data stores to arrest the progress of the assault
• Creating digital copies of every breached server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding anti-virus protection to all virus-free endpoints
• Recovering data from air-gapped backups or uncompromised machines
• Creating a pristine environment
• Mapping and connecting drives to match precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond extorting money for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") files. Hackers are then able to require a separate payment for not publishing this data or selling it. Unfortunately, there is no way to be certain that exfiltrated files have been completely deleted by the hacker. In fact, in many instances the threat actor has little say about the disposition of the data. Paying an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy lawyers, conducting an inventory of files were stolen, and performing the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and on-premises network services throughout the U.S. for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have been awarded high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning software. This scope of expertise allows Progent to identify and integrate the surviving parts of your IT environment after a ransomware intrusion and reconstruct them rapidly into an operational system. Progent has collaborated with top insurance providers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Brasília
To get in touch with Progent about ransomware settlement services in Brasília, phone Progent at 800-462-8800 or go to Contact Progent.