Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Uberlândia
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated activity that calls for a combination of real-word experience, IT skills and business savvy. It also demands working closely with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the number one goal of the ransomware target is operational continuity, it is vital to deploy response teams that operate efficiently, in parallel, and in close communication. Progent offers the breadth of technical skills and the depth of personnel to supplement your network support team and recover your network quickly and economically.

Support available from Progent's ransomware settlement experts include:

• Establishing the type of ransomware involved in the attack
• Making contact with the hacker persona
• Assessing the recovery risk
• Verifying the hacker's decryption capabilities
• Deciding on an acceptable settlement with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and timeline with the TA
• Confirming adherence to anti-money laundering laws
• Overseeing the crypto-currency transfer to the TA
• Receiving, reviewing, and operating the hacker's decryptor tool
• If necessary, contacting the TA for technical help with the decryption utility

• Quarantining infected endpoints and data stores to prevent further spread of the assault
• Making digital copies of each infected device and data store in order to perform forensics without interfering with restoration
• Installing A/V agents to all clean endpoints
• Restoring files from air-gapped restores or unscathed endpoints
• Creating a clean recovery environment
• Mapping and connecting datastores to match precisely their pre-encryption state

Exfiltration Ransoms
Beyond demanding payment for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") information. TAs can then require a separate ransom for not divulging this data or selling it. Unfortunately, there exists no method to prove that stolen files have been totally erased by the threat actor. In fact, in many cases the threat actor has limited say about data custody. Paying an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy lawyers, performing an audit on which files were taken, and performing the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises IT services across the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have been awarded advanced certifications in foundation technology platforms such as Cisco networking, VMware, and major Linux distros. Progent's data security experts have earned prestigious certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial management and ERP applications. This breadth of skills gives Progent the ability to identify and consolidate the surviving pieces of your network after a ransomware assault and reconstruct them rapidly into an operational network. Progent has worked with leading insurance providers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Uberlândia
To contact with Progent about crypto-ransomware settlement negotiation expertise in Uberlândia, call Progent at 800-462-8800 or go to Contact Progent.