Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Consulting in Brasília
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated activity that calls for a mix of field experience, technical knowledge and business acumen. It also demands working closely with the victim's IT team and the cyber insurance provider, if any. Since the number one priority of the ransomware target is operational continuity, it is vital to deploy response teams that operate efficiently, in parallel, and in close communication. Progent offers the breadth of IT skills and the depth of personnel to complement your IT staff and recover your network rapidly and affordably.

Services provided by Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Testing the TA's decryption capabilities
• Determining a settlement payment with the victim and the insurance provider
• Establishing a settlement and schedule with the threat actor
• Confirming adherence to anti-money laundering regulations
• Carrying out the crypto-currency payment to the hacker
• Receiving, learning, and using the TA's decryptor utility
• If needed, contacting the threat actor for assistance with the decryptor tool

• Quarantining infected endpoints to arrest the spread of the attack
• Creating replicas of each infected server and endpoint and data store to allow forensics in parallel with recovery
• Installing A/V protection to all virus-free endpoints
• Restoring files from offline backups or uncompromised endpoints
• Building a pristine recovery environment
• Mapping and reconnecting drives to reflect exactly their pre-encryption condition

Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to steal (or "exfiltrate") information. Hackers can then demand an additional ransom in exchange for not publishing this information on the dark web. Sadly, there is no method to be certain that stolen files have been totally deleted by the threat actor. Actually, in many cases the TA has little say over where the information ends up. Settling an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, performing an audit on which data were taken, and carrying out the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite IT services across the United States for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have been awarded advanced certifications in core technologies including Cisco networking, VMware virtualization, and major Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning software. This breadth of expertise allows Progent to salvage and consolidate the undamaged pieces of your information system after a ransomware attack and rebuild them rapidly into a functioning network. Progent has collaborated with leading insurance providers like Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Brasília
To get in touch with Progent about ransomware settlement negotiation guidance in Brasília, phone Progent at 800-462-8800 or go to Contact Progent.