Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Long Beach
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that calls for a combination of field experience, IT skills and business savvy. It also calls for close co-operation with the ransomware victim's IT team and the insurance provider, if any. Since the number one goal of the ransomware victim is operational continuity, it is vital to establish recovery groups that work efficiently, concurrently, and with intimate collaboration. Progent has the breadth of technical skills and the deep bench of experts to complement your IT staff and recover your network environment rapidly and economically.

Services offered by Progent's ransomware negotiation team include:

• Determining the type of ransomware used in the assault
• identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Validating the hacker's decryption tool
• Determining a settlement with the victim and the insurance carrier
• Establishing a settlement amount and schedule with the hacker
• Checking accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency disbursement to the hacker
• Receiving, reviewing, and using the threat actor's decryption utility
• If needed, contacting the threat actor for assistance with the decryption tool

• Quarantining affected endpoints and data stores to arrest the spread of the attack
• Creating digital copies of each infected server and endpoint and data store to allow forensics without interfering with recovery
• Adding anti-virus protection to all virus-free endpoints
• Salvaging files from offline restores or uncompromised endpoints
• Creating a clean recovery environment
• Mapping and reconnecting datastores to match exactly their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often try to exfiltrate files. TAs are then able to require an extra settlement in exchange for not divulging this information on the dark web. Sadly, there is no method to prove that exfiltrated data have been completely deleted by the hacker. In fact, in many cases the threat actor has limited say about data custody. Settling an exfiltration ransom does not free you from the need for seeking the advice of legal counsel, performing an inventory of data were stolen, and carrying out the mandated notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite IT services throughout the United States for over 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in core technologies including Cisco infrastructure, VMware, and popular Linux distros. Progent's data security experts have earned prestigious certifications including CISM, CISSP, and GIAC. (See Progent's certifications). Progent also offers top-tier support in financial and ERP software. This breadth of expertise allows Progent to identify and integrate the surviving pieces of your information system after a ransomware intrusion and rebuild them rapidly into a functioning network. Progent has collaborated with top cyber insurance carriers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Services in Long Beach
To contact with Progent about crypto-ransomware settlement guidance in Long Beach, phone Progent at 800-462-8800 or go to Contact Progent.