Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Bellevue
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex activity that requires a mix of field experience, technical skills and business savvy. It also requires close co-operation with the victim's IT staff and the insurance carrier, if any. Since the number one goal of the ransomware target is operational continuity, it is critical to establish recovery teams that operate efficiently, concurrently, and in close communication. Progent offers the breadth of technical knowledge and the deep bench of personnel to complement your network staff and restore your network environment quickly and economically.

Support available from Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the assault
• making contact with the hacker persona
• Evaluating the likelihood of recovery
• Testing the TA's decryption tool
• Budgeting a settlement range with the ransomware victim and the insurance carrier
• Establishing a settlement amount and schedule with the hacker
• Checking compliance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the hacker
• Receiving, reviewing, and operating the TA's decryptor utility
• If needed, contacting the threat actor for technical assistance with the decryptor tool

• Quarantining infected endpoints to prevent further progress of the assault
• Making replicas of every breached device and data store in order to perform forensics without interfering with cleanup
• Adding anti-virus protection to all clean endpoints
• Restoring data from air-gapped restores or unscathed endpoints
• Building a clean environment
• Mapping and connecting datastores to match exactly their pre-encryption state

Paying Exfiltration Ransoms
In addition to extorting money for a decryption utility, current variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to exfiltrate information. TAs are then able to require an additional ransom in exchange for not divulging this information on the dark web. Sadly, there exists no way to guarantee that exfiltrated data have been completely deleted by the threat actor. In fact, in numerous instances the hacker has little control over the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of seeking the advice of privacy attorneys, performing an inventory of files were compromised, and performing the mandated alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises IT services across the U.S. for over 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have been awarded high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security experts have earned industry-recognized certifications such as CISA, CISSP, and GIAC. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This broad array of expertise allows Progent to identify and integrate the surviving pieces of your IT environment following a ransomware assault and rebuild them rapidly into an operational system. Progent has worked with leading insurance providers like Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Bellevue
To get in touch with Progent about ransomware settlement expertise in Bellevue, phone Progent at 800-462-8800 or go to Contact Progent.