Ransomware Solutions Services

Overview of Progent's Ransomware Settlement Negotiation Services in Cheyenne
Progent has experience negotiating ransomware settlements with threat actors (TAs). Negotiating an acceptable settlement is a complex exercise that requires a combination of field experience, technical skills and business savvy. It also calls for close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if any. Because the top priority of the ransomware victim is operational continuity, it is critical to deploy recovery teams that work efficiently, concurrently, and with intimate collaboration. Progent has the scope of technical skills and the deep bench of experts to complement your IT staff and restore your network rapidly and affordably.

Services offered by Progent's ransomware negotiation team include:

• Determining the kind of ransomware involved in the attack
• making contact with the hacker persona
• Evaluating the recovery risk
• Validating the TA's decryption tool
• Deciding on an acceptable settlement amount with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the TA
• Confirming adherence to anti-money laundering (AML) sanctions
• Overseeing the crypto-currency transfer to the hacker
• Receiving, learning, and using the threat actor's decryptor tool
• If necessary, contacting the TA for assistance with the decryptor tool

• Isolating affected endpoints to arrest the progress of the attack
• Creating digital copies of each infected server and endpoint and data store to allow forensics without interfering with cleanup
• Adding anti-virus protection to all clean endpoints
• Salvaging files from offline backups or unscathed machines
• Building a pristine environment
• Mapping and connecting datastores to match exactly their pre-encryption condition

Exfiltration Ransoms
Beyond demanding payment for a decryption tool, current strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") files. TAs can then require a separate settlement in exchange for not publishing this information or selling it. Unfortunately, there is no way to prove that stolen files have been completely deleted by the TA. In fact, in numerous instances the hacker has little control over where the information ends up. Settling an exfiltration ransom does not eliminate the need for engaging the advice of privacy lawyers, performing an investigation into which data were compromised, and carrying out the mandated alerts to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite IT services across the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded advanced certifications in core technology platforms including Cisco networking, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications including CISM, CISSP-ISSAP, and GIAC. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning application software. This broad array of expertise gives Progent the ability to identify and consolidate the undamaged parts of your information system following a ransomware assault and rebuild them rapidly into a viable network. Progent has collaborated with top insurance providers including Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Cheyenne
To get in touch with Progent about ransomware settlement expertise in Cheyenne, phone Progent at 800-462-8800 or go to Contact Progent.