Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in Anchorage
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated exercise that calls for a mix of real-word experience, technical knowledge and business savvy. It also demands close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Because the top goal of the ransomware target is fast recovery, it is vital to establish response teams that work efficiently, concurrently, and in close communication. Progent offers the scope of technical skills and the depth of experts to supplement your IT staff and recover your network quickly and affordably.

Support available from Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware used in the assault
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Validating the threat actor's decryption tool
• Budgeting a settlement payment with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the TA
• Checking compliance with anti-money laundering regulations
• Overseeing the crypto-currency payment to the TA
• Acquiring, reviewing, and using the TA's decryption tool
• If necessary, contacting the TA for technical assistance with the decryptor tool

• Isolating affected endpoints to prevent further spread of the attack
• Making replicas of each breached device and data store to allow forensics in parallel with restoration
• Adding anti-virus agents to all virus-free endpoints
• Salvaging data from air-gapped restores or uncompromised machines
• Creating a pristine recovery environment
• Mapping and connecting datastores to match precisely their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") information. TAs are then able to demand an additional settlement for not posting this information or selling it. Unfortunately, there exists no way to guarantee that exfiltrated data have been completely deleted by the TA. Actually, in numerous cases the TA has little control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for engaging the advice of privacy attorneys, conducting an audit on which data were compromised, and sending the necessary alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and on-premises IT services throughout the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have earned high-level certifications in foundation technologies such as Cisco networking, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications such as CISA, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning application software. This scope of expertise gives Progent the ability to identify and integrate the surviving pieces of your information system after a ransomware intrusion and rebuild them rapidly into a viable network. Progent has collaborated with leading cyber insurance providers including Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Anchorage
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Anchorage, call Progent at 800-462-8800 or go to Contact Progent.