Ransomware Response Services

Progent's Ransomware Negotiation Services in Anaheim
Progent has experience negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complicated activity that calls for a mix of field experience, technical knowledge and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the cyber insurance carrier, if there is one. Since the number one priority of the ransomware victim is operational continuity, it is critical to establish recovery teams that operate efficiently, concurrently, and with intimate collaboration. Progent has the scope of technical knowledge and the deep bench of personnel to supplement your IT staff and recover your network environment rapidly and economically.

Services available from Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Verifying the TA's decryption tool
• Determining a settlement range with the victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the threat actor
• Checking compliance with anti-money laundering laws
• Carrying out the crypto-currency disbursement to the hacker
• Receiving, learning, and using the threat actor's decryption mechanism
• If needed, contacting the TA for technical assistance with the decryptor tool

• Quarantining affected endpoints and data stores to arrest the spread of the attack
• Making digital copies of every compromised device and data store in order to perform forensics without interfering with recovery
• Adding anti-virus protection to all clean endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Creating a clean recovery environment
• Remapping and connecting drives to reflect exactly their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current variants of ransomware like Ryuk, Maze, Netwalker, and Egregor commonly try to steal (or "exfiltrate") information. TAs can then demand an extra payment for not posting this data on the dark web. Sadly, there is no method to be certain that exfiltrated data have been completely erased by the threat actor. Actually, in numerous cases the threat actor has little say over who can access the stolen files. Paying an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, conducting an audit on which files were compromised, and carrying out the mandated alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the United States for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned high-level certifications in core technologies such as Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP applications. This broad array of skills gives Progent the ability to identify and consolidate the undamaged pieces of your IT environment following a ransomware attack and rebuild them quickly into a functioning network. Progent has worked with leading cyber insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Services in Anaheim
To contact with Progent about crypto-ransomware settlement guidance in Anaheim, call Progent at 800-462-8800 or go to Contact Progent.