Ransomware Response Services

Overview of Progent's Ransomware Settlement Negotiation Services in Anaheim
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex exercise that calls for a combination of real-word experience, IT skills and business savvy. It also demands close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if any. Since the top goal of the ransomware target is operational continuity, it is critical to deploy recovery groups that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of technical knowledge and the depth of experts to complement your network staff and restore your network rapidly and economically.

Services provided by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware used in the attack
• making contact with the hacker persona
• Evaluating the recovery risk
• Testing the TA's decryption tool
• Deciding on an acceptable settlement with the ransomware victim and the insurance carrier
• Establishing a settlement amount and timeline with the hacker
• Verifying compliance with anti-money laundering (AML) regulations
• Managing the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the TA's decryptor tool
• If necessary, contacting the hacker for assistance with the decryption tool

• Quarantining affected endpoints and data stores to prevent further progress of the assault
• Making replicas of each compromised device and data store in order to perform forensics in parallel with restoration
• Adding anti-virus agents to all virus-free endpoints
• Restoring data from offline restores or uncompromised machines
• Building a clean recovery environment
• Mapping and connecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
In addition to extorting money for a decryption tool, current variants of ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") information. TAs are then able to demand an additional payment in exchange for not posting this data on the dark web. Sadly, there is no way to prove that stolen data have been completely deleted by the TA. Actually, in many cases the hacker has little control over where the information ends up. Settling an exfiltration ransom does not free you from the necessity of getting the guidance of privacy lawyers, performing an audit on which files were taken, and sending the mandated alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite network services throughout the U.S. for over 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have been awarded advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's data security consultants have earned industry-recognized certifications including CISA, CISSP, and CRISC. (See Progent's certifications). Progent also offers top-tier support in financial management and ERP applications. This breadth of skills allows Progent to salvage and integrate the undamaged parts of your network following a ransomware attack and rebuild them quickly into a functioning system. Progent has worked with top cyber insurance providers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Anaheim
To get in touch with Progent about ransomware settlement expertise in Anaheim, phone Progent at 800-462-8800 or go to Contact Progent.