Ransomware Solutions Consultants

Progent's Ransomware Negotiation Services in Oakland
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that calls for a mix of field experience, IT skills and business savvy. It also calls for working closely with the cyber-extortion target's IT staff and the insurance provider, if any. Since the top priority of the ransomware victim is operational continuity, it is critical to deploy recovery groups that work effectively, concurrently, and in close communication. Progent has the breadth of technical skills and the depth of experts to complement your network staff and restore your network environment rapidly and affordably.

Support provided by Progent's ransomware settlement team include:

• Establishing the kind of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Validating the threat actor's decryption capabilities
• Agreeing on a settlement range with the ransomware victim and the insurance carrier
• Negotiating a settlement amount and schedule with the TA
• Confirming accordance with anti-money laundering sanctions
• Overseeing the crypto-currency payment to the hacker
• Receiving, reviewing, and using the TA's decryptor mechanism
• If needed, contacting the threat actor for technical help with the decryption tool

• Isolating affected endpoints and data stores to prevent further spread of the assault
• Making replicas of each breached device and data store in order to perform forensics in parallel with restoration
• Installing anti-virus agents to all virus-free endpoints
• Recovering files from air-gapped restores or unscathed endpoints
• Creating a clean recovery environment
• Mapping and connecting drives to match precisely their pre-encryption state

Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern strains of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") information. Hackers are then able to demand a separate ransom for not divulging this data on the dark web. Sadly, there exists no way to prove that exfiltrated data have been totally erased by the hacker. In fact, in many cases the threat actor has limited control about who can access the stolen files. Paying an exfiltration ransom does not eliminate the necessity of seeking the guidance of privacy attorneys, conducting an inventory of data were stolen, and carrying out the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite IT services across the United States for over two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes professionals who have earned high-level certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial and ERP applications. This scope of expertise gives Progent the ability to identify and integrate the undamaged parts of your information system after a ransomware attack and rebuild them rapidly into an operational network. Progent has collaborated with top insurance carriers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Oakland
To contact with Progent about crypto-ransomware settlement negotiation services in Oakland, call Progent at 800-462-8800 or go to Contact Progent.