Ransomware Solutions Consulting Services

Progent's Ransomware Negotiation Services in Dallas
Progent has experience negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex exercise that requires a combination of field experience, IT knowledge and business acumen. It also requires close co-operation with the victim's IT team and the insurance provider, if there is one. Because the top priority of the ransomware victim is operational continuity, it is critical to deploy response teams that operate effectively, concurrently, and in close communication. Progent has the breadth of technical skills and the depth of experts to supplement your IT support team and recover your network environment rapidly and affordably.

Support provided by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware involved in the assault
• Making contact with the hacker persona
• Assessing the recovery risk
• Verifying the TA's decryption tool
• Agreeing on a settlement amount with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the TA
• Confirming accordance with anti-money laundering (AML) laws
• Managing the crypto-currency payment to the TA
• Receiving, learning, and operating the hacker's decryption utility
• If necessary, contacting the TA for technical assistance with the decryption utility

• Quarantining affected endpoints and data stores to arrest the spread of the attack
• Making digital copies of each compromised device and data store in order to perform forensics in parallel with cleanup
• Adding anti-virus agents to all virus-free endpoints
• Recovering files from offline restores or unscathed endpoints
• Creating a pristine environment
• Remapping and connecting drives to reflect exactly their pre-encryption state

Settling Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often try to steal (or "exfiltrate") files. TAs are then able to require an additional ransom in exchange for not publishing this data on the dark web. Unfortunately, there is no way to be certain that stolen data have been totally erased by the TA. In fact, in many instances the hacker has limited control over the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of getting the guidance of legal counsel, performing an investigation into which files were compromised, and carrying out the required alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and on-premises IT services across the United States for more than 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning applications. This breadth of expertise gives Progent the ability to salvage and consolidate the undamaged pieces of your IT environment after a ransomware attack and reconstruct them rapidly into a functioning system. Progent has collaborated with leading cyber insurance carriers like Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Dallas
To get in touch with Progent about crypto-ransomware settlement guidance in Dallas, phone Progent at 800-462-8800 or go to Contact Progent.