Ransomware Response Services

Progent's Ransomware Negotiation Consulting in Brisbane
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complex activity that requires a combination of field experience, IT skills and business savvy. It also calls for working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware target is operational continuity, it is vital to deploy recovery groups that work effectively, in parallel, and in close communication. Progent has the breadth of IT knowledge and the deep bench of experts to supplement your IT staff and recover your network environment rapidly and economically.

Support offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the attack
• Making contact with the hacker
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Determining a settlement payment with the victim and the insurance carrier
• Establishing a settlement and schedule with the threat actor
• Checking accordance with anti-money laundering sanctions
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the threat actor's decryptor tool
• If needed, contacting the hacker for assistance with the decryption tool

• Quarantining affected endpoints and data stores to arrest the progress of the assault
• Creating replicas of every infected device and data store to allow forensics in parallel with restoration
• Adding anti-virus agents to all virus-free endpoints
• Recovering files from offline restores or uncompromised endpoints
• Building a clean recovery environment
• Mapping and reconnecting drives to match precisely their pre-encryption condition

Exfiltration Ransoms
In addition to demanding money for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Egregor often try to exfiltrate files. TAs are then able to demand a separate settlement for not posting this data or selling it. Unfortunately, there is no way to guarantee that exfiltrated data have been completely erased by the TA. In fact, in numerous cases the threat actor has little say about who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy attorneys, conducting an investigation into which files were taken, and performing the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite network services throughout the U.S. for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in core technology platforms including Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and ERP application software. This scope of expertise gives Progent the ability to salvage and integrate the surviving parts of your network after a ransomware intrusion and reconstruct them rapidly into a viable system. Progent has collaborated with top insurance carriers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Brisbane
To get in touch with Progent about ransomware settlement services in Brisbane, call Progent at 800-462-8800 or go to Contact Progent.