Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Ipanema
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated activity that requires a mix of field experience, technical knowledge and business savvy. It also calls for working closely with the ransomware victim's IT staff and the insurance carrier, if any. Because the top priority of the ransomware victim is operational continuity, it is vital to establish recovery groups that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of technical skills and the depth of experts to supplement your IT staff and recover your network environment quickly and affordably.

Support available from Progent's ransomware settlement experts include:

• Establishing the type of ransomware involved in the assault
• Making contact with the hacker persona
• Assessing the recovery risk
• Testing the threat actor's decryption tool
• Agreeing on a settlement payment with the victim and the insurance carrier
• Negotiating a settlement and schedule with the hacker
• Verifying compliance with anti-money laundering regulations
• Managing the crypto-currency disbursement to the hacker
• Receiving, reviewing, and operating the TA's decryptor utility
• If necessary, contacting the threat actor for technical help with the decryptor utility

• Quarantining infected endpoints and data stores to prevent further spread of the attack
• Making digital copies of every compromised server and endpoint and data store to allow forensics in parallel with recovery
• Installing anti-virus protection to all virus-free endpoints
• Restoring files from air-gapped restores or unscathed machines
• Creating a clean recovery environment
• Remapping and reconnecting datastores to reflect exactly their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim often attempt to exfiltrate information. Hackers can then require an extra ransom for not posting this information or selling it. Unfortunately, there is no way to guarantee that stolen data have been totally deleted by the TA. In fact, in many instances the threat actor has little control over who can access the stolen files. Paying an exfiltration ransom does not free you from the need for getting the advice of legal counsel, conducting an inventory of files were stolen, and carrying out the required alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite network services throughout the U.S. for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications including CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This scope of expertise gives Progent the ability to identify and integrate the undamaged pieces of your network after a ransomware attack and reconstruct them rapidly into a functioning network. Progent has worked with leading insurance providers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Services in Ipanema
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Ipanema, call Progent at 800-462-8800 or go to Contact Progent.