Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Services in Bellevue
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complex exercise that requires a combination of field experience, IT skills and business acumen. It also requires close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware target is operational continuity, it is vital to establish recovery teams that operate effectively, in parallel, and in close communication. Progent has the scope of technical knowledge and the deep bench of personnel to complement your IT staff and recover your network quickly and affordably.

Support offered by Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Determining a settlement range with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and schedule with the TA
• Verifying accordance with anti-money laundering regulations
• Managing the crypto-currency payment to the TA
• Acquiring, learning, and using the hacker's decryption mechanism
• If necessary, contacting the TA for technical assistance with the decryption utility

• Isolating affected endpoints to prevent further spread of the assault
• Making digital copies of every infected device and data store in order to perform forensics in parallel with cleanup
• Adding A/V agents to all clean endpoints
• Restoring files from air-gapped restores or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting datastores to reflect precisely their pre-attack condition

Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to exfiltrate information. TAs are then able to require a separate ransom in exchange for not posting this information on the dark web. Sadly, there is no method to be certain that exfiltrated data have been completely erased by the threat actor. Actually, in many instances the hacker has little control about who can access the stolen files. Paying an exfiltration ransom does not free you from the necessity of getting the advice of privacy attorneys, performing an inventory of files were stolen, and sending the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and onsite network services across the U.S. for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have been awarded high-level certifications in foundation technologies including Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and ERP software. This breadth of expertise gives Progent the ability to salvage and integrate the surviving parts of your IT environment following a ransomware attack and reconstruct them rapidly into an operational system. Progent has collaborated with top cyber insurance providers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Bellevue
To contact with Progent about crypto-ransomware settlement expertise in Bellevue, call Progent at 800-462-8800 or go to Contact Progent.