Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Addison
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that requires a combination of field experience, IT skills and business acumen. It also demands close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Because the number one goal of the ransomware victim is fast recovery, it is vital to establish recovery groups that operate effectively, in parallel, and with intimate collaboration. Progent offers the scope of technical skills and the depth of experts to supplement your network staff and recover your network quickly and economically.

Services offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• identifying and contacting the hacker
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Deciding on an acceptable settlement range with the victim and the cyber insurance carrier
• Establishing a settlement and schedule with the TA
• Checking accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, learning, and using the threat actor's decryption tool
• If necessary, contacting the hacker for technical assistance with the decryptor utility

• Isolating infected endpoints and data stores to arrest the progress of the assault
• Creating replicas of every infected device and data store to allow forensics without interfering with restoration
• Installing A/V protection to all virus-free endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Creating a clean recovery environment
• Mapping and connecting drives to reflect precisely their pre-encryption condition

Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern variants of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate information. Hackers are then able to demand a separate ransom for not divulging this information or selling it. Sadly, there exists no way to guarantee that exfiltrated data have been totally erased by the hacker. Actually, in many instances the TA has little control over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for getting the advice of privacy lawyers, conducting an investigation into which data were taken, and sending the required notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite network services throughout the United States for more than 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have earned advanced certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security experts have earned industry-recognized certifications including CISA, CISSP-ISSAP, and CRISC. (See Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning software. This scope of expertise gives Progent the ability to identify and integrate the surviving pieces of your IT environment following a ransomware intrusion and rebuild them quickly into a viable network. Progent has worked with leading insurance providers like Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Addison
To contact with Progent about ransomware settlement guidance in Addison, call Progent at 800-462-8800 or go to Contact Progent.