Ransomware Solutions Consultants

Progent's Ransomware Settlement Negotiation Consulting in Anaheim
Progent has experience negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated activity that requires a combination of real-word experience, technical skills and business savvy. It also calls for working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if any. Since the top priority of the ransomware target is fast recovery, it is vital to establish recovery groups that work effectively, in parallel, and with intimate collaboration. Progent offers the scope of technical knowledge and the deep bench of personnel to supplement your network staff and restore your network rapidly and economically.

Services available from Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the attack
• making contact with the hacker persona
• Assessing the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Agreeing on a settlement with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and schedule with the threat actor
• Confirming adherence to anti-money laundering sanctions
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and using the threat actor's decryptor mechanism
• If necessary, contacting the hacker for technical assistance with the decryption utility

• Quarantining infected endpoints and data stores to arrest the spread of the attack
• Making replicas of each compromised device and data store to allow forensics in parallel with restoration
• Installing anti-virus agents to all clean endpoints
• Restoring data from air-gapped restores or uncompromised endpoints
• Building a pristine environment
• Mapping and connecting drives to reflect exactly their pre-attack condition

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate information. Hackers can then require an additional settlement in exchange for not divulging this data or selling it. Unfortunately, there exists no method to prove that stolen files have been totally deleted by the threat actor. In fact, in many instances the threat actor has little say about who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of legal counsel, conducting an inventory of files were taken, and carrying out the mandated alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the U.S. for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned advanced certifications in foundation technology platforms such as Cisco networking, VMware, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications such as CISA, CISSP, and CRISC. (Refer to Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning software. This scope of skills gives Progent the ability to identify and consolidate the undamaged parts of your information system after a ransomware attack and rebuild them rapidly into a viable system. Progent has worked with top cyber insurance carriers like Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Anaheim
To contact with Progent about ransomware settlement guidance in Anaheim, phone Progent at 800-462-8800 or go to Contact Progent.