Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Guarulhos
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complicated exercise that calls for a combination of field experience, technical knowledge and business acumen. It also requires working closely with the cyber-extortion target's IT team and the insurance provider, if any. Since the top goal of the ransomware target is fast recovery, it is vital to establish response groups that operate efficiently, in parallel, and in close communication. Progent offers the breadth of IT skills and the depth of experts to supplement your IT staff and recover your network environment rapidly and affordably.

Services provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Validating the TA's decryption capabilities
• Budgeting a settlement amount with the ransomware victim and the insurance carrier
• Negotiating a settlement and timeline with the hacker
• Verifying accordance with anti-money laundering regulations
• Overseeing the crypto-currency transfer to the TA
• Acquiring, reviewing, and using the hacker's decryption utility
• If needed, contacting the TA for technical assistance with the decryptor tool

• Isolating infected endpoints and data stores to arrest the spread of the assault
• Making digital copies of every compromised device and data store to allow forensics in parallel with cleanup
• Adding anti-virus agents to all virus-free endpoints
• Recovering files from offline restores or unscathed machines
• Building a clean environment
• Mapping and connecting datastores to reflect precisely their pre-encryption condition

Settling Exfiltration Ransoms
Beyond extorting money for a decryption tool, current variants of ransomware like Ryuk, Maze, Netwalker, and Egregor commonly attempt to exfiltrate information. TAs are then able to demand an additional settlement in exchange for not posting this information or selling it. Unfortunately, there exists no method to guarantee that stolen files have been completely deleted by the hacker. In fact, in numerous cases the threat actor has limited say over data custody. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, conducting an inventory of data were stolen, and performing the mandated notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises IT services across the U.S. for more than two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have earned advanced certifications in core technology platforms such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning application software. This scope of skills allows Progent to identify and integrate the surviving parts of your network following a ransomware assault and rebuild them rapidly into a functioning network. Progent has worked with leading cyber insurance providers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Guarulhos
To contact with Progent about ransomware settlement negotiation expertise in Guarulhos, phone Progent at 800-462-8800 or go to Contact Progent.