Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Anchorage
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex activity that calls for a combination of field experience, technical skills and business savvy. It also demands working closely with the victim's IT team and the insurance carrier, if there is one. Because the top priority of the ransomware victim is operational continuity, it is critical to establish recovery groups that operate efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of IT skills and the depth of experts to supplement your network support team and restore your network rapidly and economically.

Support provided by Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Validating the hacker's decryption capabilities
• Budgeting a settlement with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the TA
• Confirming adherence to anti-money laundering regulations
• Carrying out the crypto-currency transfer to the hacker
• Receiving, learning, and using the hacker's decryptor tool
• If needed, contacting the threat actor for assistance with the decryptor utility

• Quarantining affected endpoints and data stores to prevent further spread of the attack
• Creating digital copies of each compromised device and data store to allow forensics in parallel with recovery
• Installing A/V protection to all clean endpoints
• Restoring data from air-gapped restores or uncompromised endpoints
• Creating a clean recovery environment
• Mapping and connecting drives to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, current variants of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor often try to steal (or "exfiltrate") information. Hackers are then able to demand a separate settlement for not divulging this information on the dark web. Sadly, there is no method to prove that stolen files have been totally erased by the hacker. In fact, in numerous instances the threat actor has limited control about data custody. Settling an exfiltration ransom does not eliminate the need for getting the advice of legal counsel, conducting an inventory of data were compromised, and sending the necessary notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in core technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned prestigious certifications including CISM, CISSP-ISSAP, and CRISC. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP application software. This scope of skills gives Progent the ability to salvage and integrate the surviving parts of your network following a ransomware assault and rebuild them rapidly into a functioning system. Progent has worked with top cyber insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Anchorage
To get in touch with Progent about crypto-ransomware settlement services in Anchorage, phone Progent at 800-462-8800 or go to Contact Progent.