Ransomware Response Consulting Services

Progent's Ransomware Negotiation Consulting in Brasília
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complex exercise that calls for a combination of field experience, technical skills and business acumen. It also calls for working closely with the ransomware victim's IT team and the insurance carrier, if there is one. Because the top priority of the ransomware target is operational continuity, it is vital to deploy recovery groups that operate effectively, concurrently, and with intimate collaboration. Progent has the scope of IT skills and the depth of experts to supplement your network support team and recover your network environment rapidly and affordably.

Support offered by Progent's ransomware settlement experts include:

• Establishing the type of ransomware involved in the attack
• making contact with the hacker
• Assessing the recovery risk
• Verifying the TA's decryption capabilities
• Determining a settlement payment with the ransomware victim and the insurance provider
• Negotiating a settlement amount and schedule with the hacker
• Verifying accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency payment to the hacker
• Acquiring, learning, and operating the TA's decryptor mechanism
• If needed, contacting the threat actor for technical assistance with the decryption utility

• Quarantining affected endpoints and data stores to arrest the spread of the assault
• Making replicas of every breached server and endpoint and data store in order to perform forensics in parallel with recovery
• Adding anti-virus agents to all clean endpoints
• Restoring files from air-gapped backups or unscathed endpoints
• Creating a clean environment
• Remapping and connecting drives to reflect exactly their pre-encryption state

Exfiltration Ransoms
Beyond demanding money for a decryption utility, current strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor commonly try to exfiltrate files. TAs are then able to demand an extra payment in exchange for not divulging this data or selling it. Unfortunately, there is no method to guarantee that stolen files have been totally erased by the threat actor. In fact, in many instances the threat actor has little control about who can access the stolen files. Settling an exfiltration ransom does not free you from the necessity of engaging the guidance of privacy lawyers, conducting an investigation into which files were compromised, and sending the mandated alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite network services across the U.S. for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have been awarded high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, and CRISC. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning software. This broad array of expertise gives Progent the ability to identify and integrate the surviving pieces of your information system following a ransomware attack and reconstruct them quickly into an operational system. Progent has collaborated with leading cyber insurance providers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Brasília
To contact with Progent about crypto-ransomware settlement negotiation guidance in Brasília, phone Progent at 800-462-8800 or go to Contact Progent.