Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Cheyenne
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that calls for a mix of field experience, technical skills and business savvy. It also requires working closely with the victim's IT team and the insurance carrier, if there is one. Since the number one goal of the ransomware target is operational continuity, it is vital to deploy response teams that work efficiently, in parallel, and with intimate collaboration. Progent has the breadth of technical knowledge and the deep bench of experts to complement your IT staff and recover your network quickly and affordably.

Services available from Progent's ransomware settlement team include:

• Determining the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Testing the hacker's decryption capabilities
• Determining a settlement amount with the victim and the insurance carrier
• Establishing a settlement and schedule with the threat actor
• Confirming adherence to anti-money laundering (AML) regulations
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, reviewing, and operating the TA's decryption utility
• If needed, contacting the TA for assistance with the decryption utility

• Isolating infected endpoints to arrest the spread of the attack
• Creating replicas of every infected server and endpoint and data store in order to perform forensics in parallel with cleanup
• Installing anti-virus agents to all virus-free endpoints
• Salvaging files from air-gapped backups or uncompromised machines
• Creating a pristine recovery environment
• Mapping and connecting datastores to match precisely their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern variants of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") files. Hackers can then require a separate payment in exchange for not divulging this information or selling it. Sadly, there is no way to guarantee that stolen files have been completely erased by the hacker. In fact, in many instances the TA has little control about who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for seeking the advice of legal counsel, performing an audit on which files were stolen, and performing the required notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and onsite IT services throughout the United States for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security consultants have earned internationally recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial management and Enterprise Resource Planning application software. This broad array of skills gives Progent the ability to salvage and consolidate the surviving parts of your IT environment after a ransomware assault and reconstruct them quickly into a functioning system. Progent has worked with leading insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Cheyenne
To contact with Progent about crypto-ransomware settlement services in Cheyenne, call Progent at 800-462-8800 or go to Contact Progent.