Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Brasília
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex exercise that calls for a mix of real-word experience, IT knowledge and business acumen. It also requires close co-operation with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the top priority of the ransomware target is fast recovery, it is vital to deploy recovery teams that operate effectively, concurrently, and in close communication. Progent has the breadth of technical knowledge and the deep bench of personnel to supplement your network staff and restore your network environment quickly and economically.

Support offered by Progent's ransomware settlement team include:

• Establishing the kind of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Testing the TA's decryption tool
• Deciding on an acceptable settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement and timeline with the TA
• Confirming compliance with anti-money laundering sanctions
• Carrying out the crypto-currency payment to the hacker
• Receiving, reviewing, and using the threat actor's decryptor tool
• If needed, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining affected endpoints and data stores to prevent further progress of the attack
• Creating digital copies of every breached device and data store in order to perform forensics in parallel with cleanup
• Adding anti-virus agents to all clean endpoints
• Recovering data from air-gapped backups or uncompromised machines
• Building a clean environment
• Mapping and connecting drives to reflect exactly their pre-attack state

Exfiltration Ransoms
In addition to extorting money for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Egregor often attempt to steal (or "exfiltrate") files. TAs are then able to demand an additional payment in exchange for not posting this data on the dark web. Unfortunately, there exists no way to prove that exfiltrated files have been totally erased by the hacker. In fact, in many cases the threat actor has limited say about where the information ends up. Settling an exfiltration ransom does not free you from the need for engaging the advice of privacy attorneys, conducting an audit on which data were stolen, and carrying out the required alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite IT services throughout the United States for over 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SBEs includes professionals who have been awarded advanced certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP software. This broad array of expertise gives Progent the ability to identify and consolidate the surviving parts of your information system following a ransomware assault and rebuild them rapidly into a functioning system. Progent has collaborated with top insurance carriers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Brasília
To get in touch with Progent about crypto-ransomware settlement guidance in Brasília, phone Progent at 800-462-8800 or go to Contact Progent.