Ransomware Solutions Consultants

Progent's Ransomware Negotiation Services in Phoenix
Progent has experience negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated activity that calls for a combination of real-word experience, technical skills and business acumen. It also calls for working closely with the victim's IT staff and the insurance carrier, if any. Since the number one goal of the ransomware target is fast recovery, it is critical to establish recovery groups that operate effectively, in parallel, and in close communication. Progent has the breadth of technical knowledge and the deep bench of personnel to supplement your IT support team and recover your network environment quickly and affordably.

Services provided by Progent's ransomware settlement team include:

• Determining the kind of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Verifying the TA's decryption tool
• Determining a settlement amount with the victim and the insurance carrier
• Negotiating a settlement and schedule with the threat actor
• Checking compliance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency disbursement to the TA
• Receiving, reviewing, and using the hacker's decryption utility
• If necessary, contacting the threat actor for technical help with the decryptor utility

• Quarantining affected endpoints to arrest the spread of the attack
• Making replicas of each infected device and data store in order to perform forensics in parallel with recovery
• Adding A/V protection to all clean endpoints
• Restoring files from air-gapped backups or unscathed machines
• Building a pristine recovery environment
• Mapping and connecting datastores to match precisely their pre-encryption condition

Settling Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. TAs are then able to demand an extra payment for not publishing this data or selling it. Unfortunately, there is no way to be certain that exfiltrated data have been totally deleted by the hacker. In fact, in many instances the TA has limited control about who can access the stolen files. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, conducting an investigation into which data were taken, and performing the required alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for more than two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned advanced certifications in foundation technologies such as Cisco networking, VMware virtualization, and major Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning applications. This broad array of skills gives Progent the ability to salvage and integrate the surviving parts of your information system following a ransomware assault and rebuild them rapidly into a viable system. Progent has collaborated with top insurance providers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Phoenix
To get in touch with Progent about crypto-ransomware settlement expertise in Phoenix, call Progent at 800-462-8800 or go to Contact Progent.