Ransomware Response Services

Progent's Ransomware Settlement Negotiation Services in Manaus
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complicated activity that requires a combination of real-word experience, IT skills and business savvy. It also demands close co-operation with the victim's IT team and the insurance provider, if there is one. Since the top goal of the ransomware target is fast recovery, it is critical to establish response teams that operate effectively, concurrently, and in close communication. Progent offers the scope of technical knowledge and the deep bench of personnel to complement your network staff and recover your network environment rapidly and affordably.

Support offered by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Testing the TA's decryption tool
• Determining a settlement range with the ransomware victim and the insurance provider
• Establishing a settlement amount and schedule with the TA
• Checking adherence to anti-money laundering regulations
• Overseeing the crypto-currency payment to the hacker
• Acquiring, learning, and operating the TA's decryptor utility
• If necessary, contacting the TA for assistance with the decryptor utility

• Quarantining infected endpoints to arrest the progress of the assault
• Creating replicas of every compromised server and endpoint and data store to allow forensics in parallel with recovery
• Adding anti-virus agents to all clean endpoints
• Salvaging files from offline restores or unscathed endpoints
• Building a clean environment
• Remapping and reconnecting drives to match exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current variants of ransomware like Ryuk, Maze, Netwalker, and Egregor commonly try to exfiltrate information. Hackers are then able to require an extra payment in exchange for not publishing this information on the dark web. Unfortunately, there exists no way to be certain that stolen files have been completely erased by the hacker. In fact, in many cases the hacker has little say over who can access the stolen files. Paying an exfiltration ransom does not eliminate the necessity of seeking the advice of legal counsel, conducting an audit on which files were taken, and sending the required alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services across the U.S. for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP applications. This broad array of expertise gives Progent the ability to identify and consolidate the surviving parts of your IT environment following a ransomware intrusion and reconstruct them quickly into a viable system. Progent has worked with leading insurance carriers including Chubb to help businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Manaus
To get in touch with Progent about crypto-ransomware settlement negotiation services in Manaus, phone Progent at 800-462-8800 or go to Contact Progent.