Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Webster
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that requires a combination of real-word experience, technical knowledge and business acumen. It also demands working closely with the cyber-extortion target's IT team and the insurance provider, if there is one. Because the number one priority of the ransomware target is fast recovery, it is critical to deploy recovery teams that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of technical skills and the deep bench of experts to supplement your IT staff and restore your network rapidly and economically.

Support provided by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Verifying the hacker's decryption capabilities
• Deciding on an acceptable settlement amount with the victim and the insurance provider
• Establishing a settlement amount and schedule with the TA
• Confirming compliance with anti-money laundering regulations
• Carrying out the crypto-currency payment to the hacker
• Acquiring, learning, and using the threat actor's decryptor mechanism
• If needed, contacting the threat actor for technical help with the decryptor utility

• Isolating infected endpoints and data stores to arrest the spread of the attack
• Creating digital copies of each breached device and data store in order to perform forensics without interfering with restoration
• Installing A/V protection to all virus-free endpoints
• Restoring data from offline backups or unscathed endpoints
• Creating a pristine environment
• Mapping and reconnecting drives to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current variants of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor commonly attempt to exfiltrate information. Hackers can then demand an additional ransom for not publishing this data or selling it. Sadly, there is no way to be certain that exfiltrated files have been completely deleted by the TA. In fact, in many cases the TA has limited say over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for getting the guidance of legal counsel, conducting an audit on which data were taken, and carrying out the required notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services across the United States for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technology platforms including Cisco networking, VMware, and popular Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP application software. This broad array of expertise gives Progent the ability to identify and consolidate the surviving parts of your network following a ransomware attack and reconstruct them quickly into a functioning system. Progent has collaborated with top cyber insurance carriers like Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Webster
To contact with Progent about ransomware settlement services in Webster, phone Progent at 800-462-8800 or go to Contact Progent.