Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Napa
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex activity that calls for a mix of real-word experience, IT knowledge and business savvy. It also calls for working closely with the ransomware victim's IT staff and the insurance provider, if there is one. Since the top goal of the ransomware victim is fast recovery, it is vital to establish response teams that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of IT knowledge and the deep bench of experts to supplement your IT support team and restore your network quickly and economically.

Support offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Testing the TA's decryption capabilities
• Deciding on an acceptable settlement with the ransomware victim and the insurance provider
• Negotiating a settlement and timeline with the threat actor
• Checking adherence to anti-money laundering (AML) laws
• Carrying out the crypto-currency transfer to the TA
• Acquiring, learning, and operating the hacker's decryptor mechanism
• If necessary, contacting the threat actor for technical help with the decryptor tool

• Quarantining affected endpoints to arrest the progress of the attack
• Making digital copies of every infected server and endpoint and data store to allow forensics in parallel with restoration
• Adding A/V protection to all virus-free endpoints
• Recovering data from offline restores or unscathed machines
• Building a pristine recovery environment
• Remapping and reconnecting datastores to match exactly their pre-attack state

Settling Exfiltration Ransoms
Beyond extorting money for a decryption utility, modern strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") information. Hackers can then require a separate payment for not divulging this information on the dark web. Sadly, there is no way to prove that exfiltrated files have been completely deleted by the TA. Actually, in many instances the hacker has little say over data custody. Paying an exfiltration ransom does not free you from the need for getting the advice of privacy attorneys, performing an investigation into which data were stolen, and carrying out the required alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and on-premises IT services throughout the U.S. for more than two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have earned advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security consultants have earned internationally recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning application software. This breadth of skills gives Progent the ability to salvage and consolidate the undamaged pieces of your network following a ransomware intrusion and reconstruct them quickly into a functioning system. Progent has worked with top cyber insurance providers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Napa
To contact with Progent about crypto-ransomware settlement negotiation expertise in Napa, phone Progent at 800-462-8800 or go to Contact Progent.