Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in Rancho Cordova
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that requires a combination of field experience, technical skills and business acumen. It also requires close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Because the number one priority of the ransomware target is fast recovery, it is vital to deploy recovery groups that work efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of IT knowledge and the deep bench of personnel to complement your network support team and restore your network quickly and economically.

Support provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware used in the assault
• making contact with the hacker persona
• Evaluating the likelihood of recovery
• Testing the TA's decryption capabilities
• Determining a settlement payment with the ransomware victim and the insurance provider
• Establishing a settlement amount and schedule with the threat actor
• Verifying accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the hacker's decryption utility
• If needed, contacting the hacker for technical help with the decryption utility

• Quarantining affected endpoints to arrest the spread of the assault
• Creating digital copies of each breached device and data store in order to perform forensics in parallel with recovery
• Adding anti-virus protection to all clean endpoints
• Recovering files from offline backups or unscathed machines
• Building a pristine recovery environment
• Remapping and reconnecting drives to reflect precisely their pre-encryption condition

Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern strains of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") information. TAs can then demand a separate ransom for not publishing this information or selling it. Unfortunately, there is no way to be certain that exfiltrated data have been completely deleted by the hacker. In fact, in many cases the TA has little say over the disposition of the data. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of privacy attorneys, conducting an investigation into which data were compromised, and performing the required notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and onsite network services across the U.S. for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, and GIAC. (See Progent's certifications). Progent also offers guidance in financial management and ERP application software. This scope of expertise allows Progent to salvage and integrate the surviving pieces of your network after a ransomware assault and rebuild them quickly into a functioning network. Progent has collaborated with top insurance providers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Rancho Cordova
To contact with Progent about ransomware settlement guidance in Rancho Cordova, call Progent at 800-462-8800 or go to Contact Progent.