Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Services in Calgary
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex activity that calls for a combination of real-word experience, IT knowledge and business savvy. It also demands close co-operation with the ransomware victim's IT staff and the insurance carrier, if there is one. Because the number one priority of the ransomware target is fast recovery, it is vital to deploy response groups that work effectively, concurrently, and in close communication. Progent offers the breadth of technical knowledge and the depth of personnel to complement your network support team and recover your network rapidly and affordably.

Support available from Progent's ransomware negotiation experts include:

• Establishing the type of ransomware involved in the attack
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Testing the hacker's decryption tool
• Deciding on an acceptable settlement amount with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the hacker
• Checking accordance with anti-money laundering laws
• Managing the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the threat actor's decryption tool
• If needed, contacting the hacker for assistance with the decryptor tool

• Quarantining infected endpoints and data stores to arrest the progress of the attack
• Creating replicas of each compromised device and data store in order to perform forensics without interfering with recovery
• Adding A/V agents to all virus-free endpoints
• Salvaging files from offline restores or uncompromised endpoints
• Building a pristine recovery environment
• Remapping and connecting datastores to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to exfiltrate files. Hackers can then demand an additional ransom in exchange for not publishing this information on the dark web. Unfortunately, there exists no way to guarantee that exfiltrated data have been totally deleted by the threat actor. Actually, in numerous instances the TA has little control over data custody. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy lawyers, conducting an inventory of data were compromised, and carrying out the necessary alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises IT services across the United States for more than 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned high-level certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications such as CISM, CISSP, and CRISC. (See Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This broad array of skills gives Progent the ability to salvage and integrate the undamaged parts of your information system following a ransomware attack and reconstruct them quickly into an operational system. Progent has collaborated with leading cyber insurance providers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Calgary
To contact with Progent about ransomware settlement negotiation services in Calgary, call Progent at 800-462-8800 or go to Contact Progent.