Ransomware Response Services

Progent's Ransomware Negotiation Services in Napa
Progent has experience negotiating ransomware settlements with threat actors (TAs). Negotiating an acceptable settlement is a complex activity that requires a mix of real-word experience, technical skills and business savvy. It also demands working closely with the cyber-extortion target's IT team and the insurance provider, if there is one. Because the number one priority of the ransomware target is operational continuity, it is vital to establish response groups that operate efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of technical knowledge and the depth of personnel to supplement your IT staff and recover your network quickly and affordably.

Services provided by Progent's ransomware negotiation team include:

• Establishing the type of ransomware involved in the attack
• identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption tool
• Determining a settlement amount with the ransomware victim and the insurance provider
• Negotiating a settlement and schedule with the TA
• Confirming adherence to anti-money laundering (AML) laws
• Carrying out the crypto-currency payment to the hacker
• Receiving, learning, and using the hacker's decryptor tool
• If needed, contacting the threat actor for assistance with the decryption utility

• Quarantining infected endpoints and data stores to arrest the spread of the assault
• Creating digital copies of every breached server and endpoint and data store in order to perform forensics without interfering with restoration
• Installing anti-virus agents to all clean endpoints
• Recovering files from offline backups or unscathed endpoints
• Creating a clean environment
• Mapping and reconnecting datastores to match precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond demanding money for a decryption utility, current strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to steal (or "exfiltrate") information. Hackers can then demand a separate ransom for not divulging this information or selling it. Unfortunately, there is no method to guarantee that stolen data have been completely deleted by the threat actor. Actually, in numerous instances the threat actor has limited say over who can access the stolen files. Paying an exfiltration ransom does not free you from the need for engaging the advice of privacy lawyers, conducting an audit on which files were stolen, and performing the mandated alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and on-premises IT services across the United States for more than two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes professionals who have been awarded advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned prestigious certifications including CISA, CISSP, and GIAC. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP application software. This broad array of skills allows Progent to salvage and consolidate the undamaged pieces of your information system after a ransomware intrusion and rebuild them quickly into a functioning system. Progent has collaborated with top insurance providers like Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Napa
To get in touch with Progent about ransomware settlement negotiation guidance in Napa, call Progent at 800-462-8800 or go to Contact Progent.