Ransomware Solutions Services

Progent's Ransomware Negotiation Consulting in Sydney
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that calls for a combination of real-word experience, IT knowledge and business acumen. It also demands close co-operation with the victim's IT staff and the insurance provider, if there is one. Because the number one priority of the ransomware victim is fast recovery, it is vital to deploy recovery teams that work efficiently, in parallel, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of personnel to supplement your IT staff and restore your network environment rapidly and economically.

Services offered by Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Deciding on an acceptable settlement with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the threat actor
• Verifying adherence to anti-money laundering sanctions
• Overseeing the crypto-currency disbursement to the TA
• Receiving, reviewing, and using the threat actor's decryptor tool
• If necessary, contacting the threat actor for technical help with the decryptor tool

• Isolating infected endpoints to arrest the spread of the assault
• Creating digital copies of each infected server and endpoint and data store to allow forensics in parallel with recovery
• Adding A/V agents to all clean endpoints
• Restoring data from air-gapped backups or uncompromised machines
• Creating a clean recovery environment
• Mapping and connecting datastores to reflect precisely their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim commonly try to exfiltrate information. Hackers can then demand a separate payment for not posting this information on the dark web. Unfortunately, there is no way to prove that stolen files have been totally erased by the TA. In fact, in many instances the TA has little control about the disposition of the data. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, conducting an investigation into which files were taken, and sending the required alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and on-premises IT services throughout the United States for more than two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial management and ERP applications. This broad array of expertise allows Progent to identify and integrate the undamaged pieces of your information system after a ransomware intrusion and rebuild them rapidly into a viable network. Progent has collaborated with top insurance providers including Chubb to help businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Sydney
To contact with Progent about ransomware settlement negotiation expertise in Sydney, call Progent at 800-462-8800 or go to Contact Progent.