Ransomware Response Consulting Services

Progent's Ransomware Negotiation Services in Anaheim
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complicated exercise that calls for a mix of field experience, technical skills and business acumen. It also demands close co-operation with the cyber-extortion target's IT staff and the insurance carrier, if any. Because the top priority of the ransomware victim is fast recovery, it is critical to deploy response groups that operate effectively, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the deep bench of personnel to complement your IT staff and recover your network quickly and affordably.

Support provided by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Validating the threat actor's decryption tool
• Budgeting a settlement amount with the victim and the insurance carrier
• Negotiating a settlement amount and schedule with the threat actor
• Verifying adherence to anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, reviewing, and using the TA's decryption utility
• If necessary, contacting the threat actor for assistance with the decryptor utility

• Quarantining affected endpoints to prevent further progress of the attack
• Creating digital copies of every breached device and data store to allow forensics without interfering with recovery
• Installing anti-virus agents to all virus-free endpoints
• Salvaging data from offline backups or unscathed machines
• Building a pristine recovery environment
• Remapping and reconnecting drives to match exactly their pre-attack state

Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to exfiltrate files. TAs are then able to demand a separate ransom for not divulging this data or selling it. Sadly, there exists no way to guarantee that exfiltrated files have been totally erased by the threat actor. Actually, in numerous cases the TA has little control over where the information ends up. Paying an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy attorneys, performing an inventory of files were compromised, and carrying out the necessary notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite network services throughout the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes professionals who have been awarded advanced certifications in foundation technologies including Cisco networking, VMware, and major Linux distros. Progent's data security experts have earned prestigious certifications including CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and Enterprise Resource Planning applications. This breadth of skills gives Progent the ability to salvage and integrate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them quickly into an operational network. Progent has collaborated with top cyber insurance carriers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Anaheim
To get in touch with Progent about crypto-ransomware settlement negotiation services in Anaheim, phone Progent at 800-462-8800 or go to Contact Progent.