Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Consulting in Dallas
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complicated exercise that requires a combination of real-word experience, technical knowledge and business acumen. It also calls for working closely with the ransomware victim's IT staff and the cyber insurance provider, if there is one. Because the number one priority of the ransomware target is operational continuity, it is vital to establish response teams that operate efficiently, concurrently, and in close communication. Progent has the scope of technical knowledge and the deep bench of experts to complement your IT staff and restore your network environment quickly and affordably.

Services offered by Progent's ransomware settlement experts include:

• Establishing the type of ransomware used in the attack
• identifying and contacting the hacker persona
• Assessing the recovery risk
• Verifying the threat actor's decryption tool
• Determining a settlement range with the victim and the insurance carrier
• Negotiating a settlement and timeline with the TA
• Verifying adherence to anti-money laundering regulations
• Overseeing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and using the threat actor's decryptor utility
• If necessary, contacting the hacker for technical assistance with the decryptor tool

• Quarantining infected endpoints to arrest the spread of the attack
• Making digital copies of each infected server and endpoint and data store to allow forensics without interfering with restoration
• Installing A/V protection to all clean endpoints
• Restoring data from air-gapped backups or unscathed endpoints
• Building a pristine recovery environment
• Mapping and reconnecting drives to match exactly their pre-attack condition

Paying Exfiltration Ransoms
Beyond demanding money for a decryption utility, current strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly try to exfiltrate information. TAs are then able to demand an additional settlement in exchange for not publishing this data on the dark web. Unfortunately, there is no method to guarantee that stolen files have been completely deleted by the threat actor. Actually, in numerous cases the TA has little say about where the information ends up. Settling an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, performing an investigation into which files were taken, and performing the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services across the United States for over two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in core technologies such as Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, and CRISC. (See Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This scope of expertise gives Progent the ability to salvage and consolidate the undamaged parts of your network following a ransomware intrusion and reconstruct them quickly into an operational system. Progent has worked with top insurance carriers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Dallas
To contact with Progent about ransomware settlement negotiation expertise in Dallas, phone Progent at 800-462-8800 or go to Contact Progent.