Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Consulting in Napa
Progent has experience negotiating ransomware settlements with threat actors (TAs). Negotiating an acceptable settlement is a complicated activity that requires a mix of real-word experience, IT knowledge and business acumen. It also requires working closely with the cyber-extortion target's IT team and the cyber insurance carrier, if any. Since the top priority of the ransomware victim is fast recovery, it is critical to establish response groups that work effectively, concurrently, and with intimate collaboration. Progent offers the scope of IT knowledge and the depth of experts to supplement your network staff and recover your network rapidly and affordably.

Services offered by Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware used in the attack
• identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Testing the hacker's decryption tool
• Agreeing on a settlement range with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and schedule with the hacker
• Checking compliance with anti-money laundering sanctions
• Overseeing the crypto-currency payment to the hacker
• Receiving, reviewing, and using the TA's decryption utility
• If needed, contacting the threat actor for technical help with the decryption tool

• Quarantining infected endpoints to prevent further progress of the assault
• Making digital copies of each compromised device and data store to allow forensics without interfering with cleanup
• Adding A/V agents to all clean endpoints
• Recovering files from air-gapped backups or uncompromised endpoints
• Building a pristine environment
• Remapping and reconnecting datastores to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern variants of ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly attempt to exfiltrate information. Hackers are then able to demand a separate payment in exchange for not publishing this information on the dark web. Sadly, there exists no method to prove that stolen data have been completely erased by the hacker. In fact, in numerous instances the TA has little say about where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of getting the advice of privacy attorneys, performing an investigation into which data were taken, and sending the necessary alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises IT services across the U.S. for over 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SBEs includes professionals who have earned advanced certifications in foundation technologies including Cisco infrastructure, VMware, and popular Linux distros. Progent's data security experts have earned industry-recognized certifications such as CISA, CISSP, and CRISC. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP software. This broad array of expertise allows Progent to salvage and integrate the surviving parts of your IT environment after a ransomware assault and reconstruct them quickly into a functioning network. Progent has worked with top insurance carriers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Napa
To get in touch with Progent about crypto-ransomware settlement services in Napa, phone Progent at 800-462-8800 or go to Contact Progent.