Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Belo Horizonte
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complicated exercise that calls for a mix of field experience, technical knowledge and business acumen. It also calls for close co-operation with the cyber-extortion target's IT staff and the insurance provider, if any. Because the number one goal of the ransomware target is fast recovery, it is vital to deploy response teams that operate efficiently, in parallel, and in close communication. Progent has the breadth of technical knowledge and the depth of personnel to complement your network support team and recover your network rapidly and economically.

Services available from Progent's ransomware negotiation team include:

• Determining the type of ransomware used in the attack
• Making contact with the hacker
• Evaluating the recovery risk
• Verifying the TA's decryption tool
• Budgeting a settlement with the ransomware victim and the insurance provider
• Establishing a settlement and timeline with the hacker
• Confirming compliance with anti-money laundering laws
• Overseeing the crypto-currency disbursement to the TA
• Receiving, learning, and using the TA's decryption tool
• If necessary, contacting the threat actor for assistance with the decryptor tool

• Quarantining infected endpoints to prevent further spread of the attack
• Creating replicas of every breached server and endpoint and data store in order to perform forensics in parallel with cleanup
• Installing A/V agents to all clean endpoints
• Recovering data from offline backups or uncompromised endpoints
• Building a pristine recovery environment
• Mapping and connecting drives to match precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption tool, modern strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") files. TAs are then able to demand an additional ransom in exchange for not divulging this data or selling it. Sadly, there exists no way to prove that exfiltrated data have been totally deleted by the TA. Actually, in many cases the threat actor has little say about the disposition of the data. Paying an exfiltration ransom does not eliminate the need for engaging the advice of legal counsel, conducting an audit on which files were taken, and performing the necessary notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises IT services across the U.S. for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware, and popular distributions of Linux. Progent's data security consultants have earned prestigious certifications including CISA, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning software. This scope of expertise gives Progent the ability to identify and integrate the undamaged pieces of your IT environment after a ransomware attack and rebuild them quickly into a functioning system. Progent has worked with top cyber insurance providers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Belo Horizonte
To contact with Progent about ransomware settlement services in Belo Horizonte, phone Progent at 800-462-8800 or go to Contact Progent.