Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Bakersfield
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex exercise that requires a mix of real-word experience, IT skills and business savvy. It also calls for working closely with the cyber-extortion target's IT staff and the insurance provider, if any. Since the top priority of the ransomware target is fast recovery, it is vital to deploy response teams that work efficiently, concurrently, and in close communication. Progent offers the breadth of technical skills and the deep bench of experts to supplement your IT support team and restore your network quickly and affordably.

Support available from Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the threat actor's decryption tool
• Budgeting a settlement with the ransomware victim and the insurance provider
• Establishing a settlement and schedule with the hacker
• Checking accordance with anti-money laundering laws
• Managing the crypto-currency payment to the TA
• Receiving, learning, and operating the TA's decryption mechanism
• If needed, contacting the threat actor for technical assistance with the decryption utility

• Isolating affected endpoints and data stores to prevent further progress of the attack
• Making digital copies of each breached device and data store to allow forensics in parallel with restoration
• Installing anti-virus protection to all clean endpoints
• Recovering files from air-gapped backups or uncompromised endpoints
• Building a clean environment
• Mapping and connecting datastores to reflect precisely their pre-attack condition

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly try to exfiltrate information. TAs can then require a separate settlement in exchange for not posting this information on the dark web. Unfortunately, there exists no method to guarantee that exfiltrated data have been completely deleted by the threat actor. Actually, in numerous cases the threat actor has limited control about where the information ends up. Paying an exfiltration ransom does not eliminate the need for getting the advice of legal counsel, conducting an inventory of files were stolen, and performing the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises IT services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded high-level certifications in foundation technologies including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security consultants have earned prestigious certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This scope of skills gives Progent the ability to identify and integrate the undamaged parts of your information system after a ransomware assault and rebuild them quickly into an operational network. Progent has collaborated with leading cyber insurance carriers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Bakersfield
To get in touch with Progent about crypto-ransomware settlement negotiation services in Bakersfield, call Progent at 800-462-8800 or go to Contact Progent.