Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Consulting in Mesa
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that calls for a mix of field experience, technical skills and business savvy. It also requires working closely with the ransomware victim's IT team and the cyber insurance carrier, if there is one. Because the top goal of the ransomware target is operational continuity, it is vital to establish response teams that operate effectively, concurrently, and with intimate collaboration. Progent offers the breadth of IT knowledge and the deep bench of experts to complement your network support team and restore your network rapidly and affordably.

Services offered by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware involved in the assault
• identifying and contacting the hacker persona
• Assessing the recovery risk
• Testing the hacker's decryption capabilities
• Determining a settlement payment with the victim and the insurance provider
• Establishing a settlement amount and timeline with the hacker
• Verifying accordance with anti-money laundering laws
• Overseeing the crypto-currency transfer to the hacker
• Acquiring, reviewing, and using the threat actor's decryption mechanism
• If needed, contacting the hacker for technical help with the decryptor tool

• Isolating affected endpoints to prevent further progress of the attack
• Creating digital copies of each breached server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding anti-virus protection to all virus-free endpoints
• Recovering files from offline restores or uncompromised machines
• Creating a pristine environment
• Remapping and reconnecting datastores to match exactly their pre-attack state

Exfiltration Ransoms
Beyond demanding money for a decryption utility, current variants of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") information. TAs can then require an extra ransom in exchange for not posting this data on the dark web. Unfortunately, there exists no way to be certain that stolen data have been completely erased by the threat actor. Actually, in many instances the TA has limited control about where the information ends up. Settling an exfiltration ransom does not free you from the need for getting the guidance of privacy attorneys, conducting an inventory of data were compromised, and performing the necessary notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite IT services throughout the U.S. for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, and GIAC. (See Progent's certifications). Progent also has top-tier support in financial management and ERP application software. This breadth of skills gives Progent the ability to salvage and consolidate the undamaged pieces of your information system after a ransomware assault and rebuild them quickly into a viable network. Progent has collaborated with top cyber insurance carriers like Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Mesa
To get in touch with Progent about ransomware settlement negotiation expertise in Mesa, call Progent at 800-462-8800 or go to Contact Progent.