Ransomware Solutions Services

Progent's Ransomware Negotiation Services in Tulsa
Progent has experience negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated exercise that calls for a mix of field experience, IT knowledge and business savvy. It also requires working closely with the cyber-extortion target's IT staff and the insurance provider, if any. Because the number one priority of the ransomware target is operational continuity, it is vital to deploy recovery teams that operate efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of IT knowledge and the depth of personnel to supplement your IT staff and restore your network environment quickly and affordably.

Services available from Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the attack
• identifying and contacting the hacker persona
• Assessing the recovery risk
• Testing the hacker's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the cyber insurance provider
• Establishing a settlement and schedule with the TA
• Verifying accordance with anti-money laundering (AML) regulations
• Managing the crypto-currency transfer to the TA
• Acquiring, learning, and using the TA's decryptor tool
• If needed, contacting the TA for technical assistance with the decryption tool

• Isolating infected endpoints to prevent further spread of the assault
• Making digital copies of each breached server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing anti-virus protection to all clean endpoints
• Recovering data from air-gapped restores or unscathed endpoints
• Building a clean recovery environment
• Mapping and reconnecting datastores to match exactly their pre-encryption state

Settling Exfiltration Ransoms
In addition to demanding payment for a decryption utility, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") files. TAs can then demand a separate payment for not publishing this information on the dark web. Sadly, there exists no method to be certain that exfiltrated files have been totally erased by the TA. In fact, in many cases the hacker has limited say over where the information ends up. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of legal counsel, conducting an inventory of files were compromised, and sending the mandated alerts to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises network services across the U.S. for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, and CRISC. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP application software. This broad array of skills allows Progent to salvage and consolidate the surviving parts of your information system after a ransomware assault and rebuild them rapidly into a viable network. Progent has collaborated with leading cyber insurance carriers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Tulsa
To get in touch with Progent about crypto-ransomware settlement expertise in Tulsa, phone Progent at 800-462-8800 or go to Contact Progent.