Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Services in Plano
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex exercise that calls for a combination of real-word experience, technical knowledge and business acumen. It also requires working closely with the ransomware victim's IT team and the cyber insurance provider, if there is one. Since the top goal of the ransomware target is operational continuity, it is critical to deploy response teams that operate effectively, in parallel, and with intimate collaboration. Progent has the breadth of technical knowledge and the depth of personnel to complement your network support team and recover your network environment quickly and affordably.

Services available from Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware involved in the assault
• making contact with the hacker persona
• Evaluating the recovery risk
• Validating the hacker's decryption tool
• Determining a settlement with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the threat actor
• Verifying compliance with anti-money laundering sanctions
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and operating the threat actor's decryption mechanism
• If needed, contacting the TA for technical assistance with the decryption tool

• Isolating infected endpoints and data stores to arrest the spread of the assault
• Creating replicas of each compromised device and data store in order to perform forensics without interfering with recovery
• Installing anti-virus agents to all virus-free endpoints
• Restoring data from offline backups or unscathed machines
• Building a clean recovery environment
• Remapping and reconnecting drives to match precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern variants of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. TAs can then demand a separate settlement for not publishing this information on the dark web. Unfortunately, there is no method to be certain that stolen data have been totally deleted by the hacker. In fact, in numerous instances the hacker has little control about the disposition of the data. Paying an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, performing an investigation into which data were stolen, and sending the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises IT services across the United States for over 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SBEs) includes consultants who have earned high-level certifications in core technology platforms such as Cisco infrastructure, VMware, and popular Linux distros. Progent's data security experts have earned industry-recognized certifications including CISM, CISSP, and GIAC. (Refer to Progent's certifications). Progent also has top-tier support in financial management and Enterprise Resource Planning application software. This broad array of expertise gives Progent the ability to salvage and integrate the surviving parts of your network after a ransomware intrusion and reconstruct them quickly into an operational system. Progent has worked with top cyber insurance providers like Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Plano
To contact with Progent about crypto-ransomware settlement services in Plano, phone Progent at 800-993-9400 or go to Contact Progent.