Ransomware Solutions Consultants

Overview of Progent's Ransomware Negotiation Consulting in Anchorage
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated activity that calls for a mix of field experience, IT knowledge and business acumen. It also demands working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if there is one. Because the number one goal of the ransomware victim is operational continuity, it is vital to establish recovery groups that work efficiently, concurrently, and in close communication. Progent has the breadth of IT knowledge and the deep bench of personnel to complement your IT staff and restore your network environment rapidly and affordably.

Services offered by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware used in the assault
• making contact with the hacker persona
• Assessing the recovery risk
• Validating the TA's decryption capabilities
• Deciding on an acceptable settlement with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and timeline with the hacker
• Confirming accordance with anti-money laundering sanctions
• Carrying out the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the TA's decryption mechanism
• If necessary, contacting the TA for technical help with the decryption tool

• Isolating affected endpoints to prevent further progress of the attack
• Creating digital copies of each breached server and endpoint and data store in order to perform forensics without interfering with recovery
• Installing A/V agents to all virus-free endpoints
• Restoring files from air-gapped restores or uncompromised endpoints
• Creating a pristine environment
• Remapping and reconnecting datastores to reflect exactly their pre-attack condition

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") files. TAs are then able to require an additional settlement for not posting this information on the dark web. Unfortunately, there exists no method to be certain that exfiltrated files have been totally erased by the hacker. Actually, in many cases the hacker has limited control about data custody. Paying an exfiltration ransom does not free you from the necessity of getting the advice of legal counsel, conducting an investigation into which data were taken, and sending the mandated alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and onsite IT services throughout the U.S. for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have earned advanced certifications in core technologies including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned internationally recognized certifications including CISA, CISSP, and CRISC. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and Enterprise Resource Planning application software. This broad array of expertise gives Progent the ability to salvage and consolidate the surviving pieces of your network following a ransomware assault and rebuild them quickly into an operational system. Progent has collaborated with top cyber insurance carriers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Anchorage
To get in touch with Progent about ransomware settlement expertise in Anchorage, call Progent at 800-462-8800 or go to Contact Progent.