Ransomware Solutions Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Phoenix
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated exercise that calls for a mix of real-word experience, IT skills and business savvy. It also demands working closely with the cyber-extortion target's IT team and the cyber insurance carrier, if any. Since the number one goal of the ransomware target is fast recovery, it is critical to establish recovery groups that work efficiently, concurrently, and in close communication. Progent offers the scope of IT skills and the deep bench of experts to supplement your IT staff and recover your network environment quickly and affordably.

Services offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption tool
• Agreeing on a settlement amount with the ransomware victim and the cyber insurance provider
• Establishing a settlement and timeline with the hacker
• Checking compliance with anti-money laundering (AML) regulations
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the hacker's decryption utility
• If necessary, contacting the threat actor for assistance with the decryptor utility

• Isolating affected endpoints to arrest the spread of the attack
• Making replicas of every compromised server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing A/V agents to all clean endpoints
• Recovering data from offline restores or unscathed machines
• Creating a pristine environment
• Mapping and connecting datastores to match precisely their pre-encryption condition

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to exfiltrate files. TAs can then demand an additional ransom for not divulging this information or selling it. Unfortunately, there exists no way to prove that exfiltrated files have been totally erased by the threat actor. In fact, in many cases the TA has limited control about where the information ends up. Paying an exfiltration ransom does not eliminate the need for getting the guidance of privacy attorneys, conducting an audit on which data were taken, and performing the necessary notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite network services throughout the United States for over 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned advanced certifications in core technology platforms such as Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security consultants have earned industry-recognized certifications including CISA, CISSP, and GIAC. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and Enterprise Resource Planning applications. This breadth of expertise gives Progent the ability to identify and consolidate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them rapidly into a viable network. Progent has collaborated with leading insurance carriers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Phoenix
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Phoenix, call Progent at 800-462-8800 or go to Contact Progent.