Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Belo Horizonte
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complex activity that requires a combination of real-word experience, technical skills and business savvy. It also demands working closely with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Because the top priority of the ransomware target is operational continuity, it is vital to deploy recovery groups that work efficiently, concurrently, and with intimate collaboration. Progent offers the scope of technical knowledge and the depth of personnel to complement your IT staff and recover your network environment rapidly and economically.

Support provided by Progent's ransomware settlement team include:

• Establishing the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Validating the TA's decryption tool
• Deciding on an acceptable settlement with the ransomware victim and the insurance provider
• Negotiating a settlement and timeline with the hacker
• Verifying compliance with anti-money laundering (AML) laws
• Overseeing the crypto-currency transfer to the TA
• Acquiring, learning, and operating the threat actor's decryptor tool
• If needed, contacting the TA for technical assistance with the decryption tool

• Isolating affected endpoints and data stores to arrest the progress of the attack
• Creating replicas of every infected server and endpoint and data store to allow forensics in parallel with cleanup
• Installing anti-virus protection to all virus-free endpoints
• Recovering files from offline backups or uncompromised machines
• Building a pristine environment
• Remapping and connecting drives to match exactly their pre-encryption state

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current strains of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly try to steal (or "exfiltrate") files. Hackers are then able to demand a separate ransom in exchange for not divulging this data or selling it. Unfortunately, there exists no way to be certain that exfiltrated files have been totally erased by the threat actor. Actually, in many cases the hacker has limited control over where the information ends up. Paying an exfiltration ransom does not free you from the need for engaging the advice of privacy attorneys, performing an inventory of files were stolen, and performing the required notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and on-premises IT services across the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial and Enterprise Resource Planning applications. This broad array of skills gives Progent the ability to salvage and consolidate the surviving parts of your information system after a ransomware intrusion and rebuild them rapidly into a functioning system. Progent has worked with leading cyber insurance providers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Belo Horizonte
To contact with Progent about ransomware settlement negotiation services in Belo Horizonte, call Progent at 800-462-8800 or go to Contact Progent.