Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Consulting in Tacoma
Progent has experience negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that calls for a mix of field experience, technical skills and business savvy. It also demands working closely with the victim's IT staff and the cyber insurance provider, if any. Since the top goal of the ransomware target is operational continuity, it is vital to establish response groups that operate effectively, in parallel, and in close communication. Progent has the scope of IT skills and the depth of personnel to supplement your IT support team and restore your network environment rapidly and affordably.

Services provided by Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware used in the assault
• Making contact with the hacker
• Evaluating the recovery risk
• Verifying the threat actor's decryption tool
• Agreeing on a settlement amount with the victim and the insurance provider
• Negotiating a settlement and schedule with the hacker
• Checking compliance with anti-money laundering (AML) sanctions
• Overseeing the crypto-currency payment to the TA
• Receiving, reviewing, and using the threat actor's decryption utility
• If needed, contacting the hacker for assistance with the decryptor utility

• Isolating affected endpoints and data stores to prevent further progress of the attack
• Creating digital copies of each breached device and data store to allow forensics in parallel with restoration
• Installing A/V protection to all clean endpoints
• Salvaging data from offline backups or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting drives to reflect precisely their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of ransomware such as Ryuk, Maze, Netwalker, and Egregor often attempt to exfiltrate information. TAs can then demand an extra payment for not publishing this data on the dark web. Unfortunately, there is no method to guarantee that exfiltrated data have been totally deleted by the TA. In fact, in numerous cases the threat actor has little control over the disposition of the data. Paying an exfiltration ransom does not free you from the need for engaging the guidance of legal counsel, conducting an inventory of data were taken, and carrying out the mandated alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and on-premises network services throughout the United States for over two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications including CISA, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial management and ERP application software. This scope of expertise allows Progent to salvage and consolidate the surviving parts of your information system following a ransomware intrusion and rebuild them quickly into a viable network. Progent has collaborated with top cyber insurance providers including Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Services in Tacoma
To contact with Progent about ransomware settlement negotiation guidance in Tacoma, phone Progent at 800-462-8800 or go to Contact Progent.