Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Carlsbad
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex activity that requires a combination of field experience, technical knowledge and business acumen. It also demands working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if there is one. Because the number one goal of the ransomware target is operational continuity, it is vital to deploy recovery groups that work efficiently, in parallel, and with intimate collaboration. Progent has the scope of IT knowledge and the deep bench of experts to supplement your network support team and restore your network environment quickly and affordably.

Services provided by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Testing the TA's decryption capabilities
• Deciding on an acceptable settlement with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and schedule with the TA
• Checking accordance with anti-money laundering laws
• Managing the crypto-currency transfer to the hacker
• Acquiring, reviewing, and using the threat actor's decryptor tool
• If necessary, contacting the threat actor for assistance with the decryption tool

• Quarantining infected endpoints to arrest the spread of the attack
• Making replicas of each breached device and data store to allow forensics in parallel with recovery
• Adding anti-virus agents to all clean endpoints
• Recovering files from air-gapped restores or uncompromised endpoints
• Creating a clean recovery environment
• Mapping and reconnecting drives to match precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") files. Hackers can then require an additional payment in exchange for not divulging this data or selling it. Unfortunately, there is no method to prove that stolen files have been completely deleted by the TA. In fact, in many cases the threat actor has little control over where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy lawyers, performing an inventory of files were taken, and performing the necessary alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises IT services throughout the United States for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have been awarded high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications including CISM, CISSP-ISSAP, and CRISC. (Refer to Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning applications. This broad array of expertise gives Progent the ability to salvage and consolidate the undamaged pieces of your network after a ransomware attack and rebuild them quickly into a viable system. Progent has worked with leading insurance providers like Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Carlsbad
To get in touch with Progent about crypto-ransomware settlement guidance in Carlsbad, phone Progent at 800-462-8800 or go to Contact Progent.