Ransomware Solutions Services

Progent's Ransomware Negotiation Services in Guadalajara
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex activity that requires a combination of field experience, IT knowledge and business savvy. It also requires working closely with the victim's IT team and the insurance provider, if any. Since the number one priority of the ransomware target is operational continuity, it is critical to deploy recovery teams that operate efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of technical knowledge and the depth of experts to supplement your IT support team and recover your network environment rapidly and affordably.

Support available from Progent's ransomware negotiation experts include:

• Determining the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Agreeing on a settlement with the victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the TA
• Confirming accordance with anti-money laundering sanctions
• Carrying out the crypto-currency transfer to the TA
• Receiving, learning, and using the TA's decryptor mechanism
• If needed, contacting the TA for technical assistance with the decryptor utility

• Isolating infected endpoints and data stores to prevent further spread of the attack
• Making digital copies of each infected device and data store in order to perform forensics in parallel with cleanup
• Adding A/V protection to all clean endpoints
• Restoring data from air-gapped restores or uncompromised machines
• Creating a pristine recovery environment
• Mapping and reconnecting drives to match precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, current variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") files. TAs can then require a separate payment for not divulging this data or selling it. Unfortunately, there is no method to guarantee that stolen data have been totally erased by the hacker. In fact, in numerous cases the threat actor has little say about where the information ends up. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy lawyers, conducting an audit on which files were compromised, and performing the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and on-premises network services throughout the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have earned high-level certifications in core technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP applications. This broad array of skills allows Progent to identify and consolidate the undamaged pieces of your network after a ransomware attack and rebuild them rapidly into a functioning system. Progent has worked with leading insurance carriers including Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Guadalajara
To contact with Progent about ransomware settlement guidance in Guadalajara, phone Progent at 800-462-8800 or go to Contact Progent.