Ransomware Solutions Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Tulsa
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated exercise that calls for a combination of real-word experience, IT skills and business savvy. It also calls for working closely with the cyber-extortion target's IT team and the insurance provider, if there is one. Since the number one priority of the ransomware target is fast recovery, it is critical to deploy recovery groups that operate effectively, in parallel, and in close communication. Progent offers the breadth of IT skills and the deep bench of experts to supplement your network support team and restore your network environment quickly and affordably.

Support available from Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware used in the attack
• making contact with the hacker
• Evaluating the likelihood of recovery
• Validating the hacker's decryption capabilities
• Budgeting a settlement amount with the victim and the insurance carrier
• Negotiating a settlement and timeline with the TA
• Checking adherence to anti-money laundering (AML) regulations
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, reviewing, and operating the threat actor's decryption utility
• If needed, contacting the hacker for assistance with the decryption utility

• Quarantining infected endpoints and data stores to arrest the progress of the attack
• Making replicas of each breached device and data store to allow forensics without interfering with recovery
• Installing A/V agents to all clean endpoints
• Salvaging data from air-gapped restores or uncompromised endpoints
• Building a clean environment
• Mapping and reconnecting datastores to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") information. Hackers can then demand an extra payment for not posting this data on the dark web. Unfortunately, there is no way to prove that stolen files have been completely erased by the TA. In fact, in many instances the hacker has limited control about the disposition of the data. Paying an exfiltration ransom does not free you from the need for engaging the guidance of privacy attorneys, conducting an investigation into which files were stolen, and sending the necessary notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and onsite network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technologies including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security experts have earned prestigious certifications such as CISM, CISSP, and CRISC. (See certifications earned by Progent consultants). Progent also offers guidance in financial and ERP software. This scope of skills gives Progent the ability to salvage and consolidate the surviving parts of your information system after a ransomware attack and rebuild them quickly into a viable system. Progent has worked with top cyber insurance providers including Chubb to help businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Tulsa
To contact with Progent about crypto-ransomware settlement guidance in Tulsa, phone Progent at 800-462-8800 or go to Contact Progent.