Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Santos
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that requires a combination of field experience, technical skills and business acumen. It also demands working closely with the ransomware victim's IT team and the insurance carrier, if any. Since the number one priority of the ransomware victim is fast recovery, it is critical to establish recovery groups that operate efficiently, in parallel, and in close communication. Progent offers the breadth of IT skills and the deep bench of experts to supplement your network staff and recover your network quickly and affordably.

Support provided by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware used in the attack
• making contact with the hacker
• Evaluating the likelihood of recovery
• Validating the threat actor's decryption tool
• Determining a settlement range with the victim and the cyber insurance provider
• Establishing a settlement amount and schedule with the TA
• Verifying accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the TA
• Acquiring, learning, and operating the hacker's decryption tool
• If necessary, contacting the hacker for technical help with the decryptor utility

• Isolating infected endpoints to prevent further progress of the attack
• Making replicas of every breached server and endpoint and data store in order to perform forensics without interfering with recovery
• Installing A/V protection to all virus-free endpoints
• Recovering data from air-gapped backups or unscathed machines
• Creating a clean environment
• Mapping and reconnecting drives to match precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to exfiltrate files. Hackers are then able to require an extra settlement for not divulging this data or selling it. Unfortunately, there is no way to prove that exfiltrated data have been totally erased by the hacker. Actually, in numerous cases the hacker has little control about where the information ends up. Settling an exfiltration ransom does not free you from the necessity of seeking the advice of privacy lawyers, performing an investigation into which files were compromised, and performing the necessary notifications to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and onsite IT services throughout the U.S. for more than 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have been awarded high-level certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security experts have earned prestigious certifications such as CISA, CISSP-ISSAP, and CRISC. (See Progent's certifications). Progent also offers guidance in financial management and ERP application software. This scope of expertise allows Progent to identify and consolidate the surviving pieces of your IT environment after a ransomware attack and rebuild them rapidly into an operational network. Progent has collaborated with top cyber insurance carriers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Santos
To get in touch with Progent about ransomware settlement expertise in Santos, call Progent at 800-462-8800 or go to Contact Progent.