Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Consulting in Chandler
Progent has experience negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that requires a combination of field experience, IT knowledge and business acumen. It also demands working closely with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Because the number one priority of the ransomware victim is fast recovery, it is critical to establish response groups that operate efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of technical knowledge and the depth of experts to complement your network support team and recover your network environment quickly and economically.

Services offered by Progent's ransomware settlement team include:

• Determining the type of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Validating the TA's decryption tool
• Agreeing on a settlement payment with the victim and the insurance carrier
• Establishing a settlement amount and schedule with the threat actor
• Checking compliance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the hacker
• Receiving, learning, and operating the threat actor's decryption utility
• If necessary, contacting the hacker for technical assistance with the decryption utility

• Isolating infected endpoints to prevent further progress of the assault
• Making digital copies of each breached device and data store to allow forensics in parallel with cleanup
• Installing anti-virus agents to all virus-free endpoints
• Restoring data from air-gapped backups or uncompromised machines
• Creating a pristine environment
• Mapping and connecting datastores to reflect exactly their pre-attack state

Paying Exfiltration Ransoms
In addition to demanding money for a decryption utility, current variants of ransomware like Ryuk, Maze, Netwalker, and Egregor often try to exfiltrate files. Hackers are then able to require a separate settlement in exchange for not divulging this information on the dark web. Sadly, there exists no way to prove that exfiltrated data have been completely deleted by the threat actor. In fact, in many instances the hacker has little say about who can access the stolen files. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of legal counsel, performing an inventory of data were compromised, and carrying out the mandated notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in core technology platforms including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial management and ERP applications. This broad array of expertise allows Progent to salvage and consolidate the undamaged parts of your network following a ransomware assault and rebuild them quickly into a functioning network. Progent has worked with leading insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Chandler
To contact with Progent about ransomware settlement expertise in Chandler, call Progent at 800-462-8800 or go to Contact Progent.