Ransomware Response Consultants

Progent's Ransomware Negotiation Consulting in Anaheim
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complicated exercise that calls for a combination of field experience, IT skills and business savvy. It also requires close co-operation with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the number one priority of the ransomware target is operational continuity, it is critical to establish response teams that work effectively, concurrently, and with intimate collaboration. Progent has the scope of technical skills and the depth of personnel to complement your IT support team and recover your network environment quickly and affordably.

Services offered by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Testing the hacker's decryption capabilities
• Determining a settlement amount with the victim and the insurance carrier
• Establishing a settlement amount and schedule with the TA
• Confirming compliance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the TA
• Acquiring, learning, and operating the TA's decryption utility
• If needed, contacting the TA for technical assistance with the decryptor utility

• Quarantining infected endpoints to prevent further progress of the attack
• Creating digital copies of every breached server and endpoint and data store to allow forensics without interfering with cleanup
• Adding anti-virus protection to all virus-free endpoints
• Restoring files from air-gapped restores or unscathed endpoints
• Creating a pristine recovery environment
• Remapping and reconnecting datastores to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate information. TAs are then able to demand a separate payment for not posting this data on the dark web. Sadly, there is no way to prove that exfiltrated files have been completely erased by the threat actor. Actually, in numerous cases the threat actor has limited say about where the information ends up. Settling an exfiltration ransom does not free you from the need for seeking the guidance of privacy attorneys, performing an audit on which data were taken, and performing the required alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises network services across the U.S. for over 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP application software. This scope of expertise gives Progent the ability to identify and integrate the undamaged pieces of your information system following a ransomware assault and reconstruct them quickly into an operational network. Progent has collaborated with top insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Anaheim
To contact with Progent about crypto-ransomware settlement negotiation services in Anaheim, call Progent at 800-462-8800 or go to Contact Progent.