Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Services in Oakland
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated activity that calls for a mix of real-word experience, technical skills and business acumen. It also demands working closely with the ransomware victim's IT staff and the insurance provider, if any. Since the number one priority of the ransomware target is fast recovery, it is vital to establish response teams that operate effectively, concurrently, and with intimate collaboration. Progent has the breadth of IT skills and the depth of experts to supplement your network support team and recover your network rapidly and affordably.

Support offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Testing the TA's decryption capabilities
• Determining a settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement amount and schedule with the hacker
• Verifying accordance with anti-money laundering sanctions
• Carrying out the crypto-currency transfer to the hacker
• Receiving, learning, and operating the TA's decryption utility
• If necessary, contacting the threat actor for assistance with the decryptor tool

• Isolating affected endpoints and data stores to prevent further spread of the assault
• Making replicas of each breached server and endpoint and data store to allow forensics without interfering with recovery
• Installing anti-virus protection to all clean endpoints
• Recovering files from air-gapped backups or uncompromised endpoints
• Creating a pristine environment
• Remapping and reconnecting datastores to reflect exactly their pre-encryption condition

Exfiltration Ransoms
Beyond extorting money for a decryption utility, modern variants of ransomware like Ryuk, Maze, Netwalker, and Nephilim often attempt to exfiltrate files. Hackers can then require an extra ransom for not publishing this information on the dark web. Unfortunately, there exists no method to be certain that stolen files have been totally erased by the TA. In fact, in many instances the TA has limited say over the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of engaging the advice of privacy lawyers, conducting an audit on which data were compromised, and performing the mandated notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the United States for more than 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned internationally recognized certifications including CISA, CISSP, and CRISC. (Refer to Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This scope of skills allows Progent to salvage and integrate the surviving parts of your network after a ransomware intrusion and rebuild them rapidly into an operational network. Progent has collaborated with top insurance carriers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Oakland
To get in touch with Progent about ransomware settlement guidance in Oakland, call Progent at 800-462-8800 or go to Contact Progent.