Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Monterey
Progent has experience negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complicated activity that requires a combination of real-word experience, IT skills and business savvy. It also requires close co-operation with the victim's IT team and the cyber insurance provider, if any. Since the number one priority of the ransomware target is fast recovery, it is critical to establish response groups that work efficiently, concurrently, and in close communication. Progent has the scope of technical skills and the depth of experts to complement your IT support team and recover your network rapidly and economically.

Support available from Progent's ransomware settlement experts include:

• Determining the type of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the recovery risk
• Verifying the threat actor's decryption capabilities
• Deciding on an acceptable settlement amount with the victim and the cyber insurance carrier
• Establishing a settlement and timeline with the TA
• Verifying accordance with anti-money laundering regulations
• Overseeing the crypto-currency transfer to the TA
• Acquiring, learning, and operating the hacker's decryption utility
• If necessary, contacting the threat actor for assistance with the decryptor utility

• Quarantining infected endpoints to prevent further spread of the assault
• Making digital copies of every infected device and data store to allow forensics in parallel with cleanup
• Adding A/V agents to all clean endpoints
• Recovering data from air-gapped restores or unscathed machines
• Creating a clean environment
• Mapping and reconnecting datastores to reflect precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond extorting money for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") files. TAs are then able to require an extra ransom in exchange for not divulging this data on the dark web. Unfortunately, there is no method to prove that exfiltrated data have been totally deleted by the TA. Actually, in numerous instances the TA has limited say over who can access the stolen files. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of legal counsel, performing an inventory of data were stolen, and sending the necessary notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the U.S. for more than 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in core technologies such as Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP applications. This breadth of skills gives Progent the ability to salvage and integrate the undamaged parts of your IT environment after a ransomware assault and rebuild them quickly into a functioning system. Progent has collaborated with top cyber insurance providers like Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Monterey
To get in touch with Progent about ransomware settlement negotiation expertise in Monterey, call Progent at 800-462-8800 or go to Contact Progent.