Ransomware Response Services

Progent's Ransomware Negotiation Consulting in Rancho Cordova
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complex exercise that calls for a combination of field experience, technical skills and business savvy. It also requires close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Since the top priority of the ransomware target is fast recovery, it is critical to deploy response teams that work efficiently, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the depth of personnel to supplement your network support team and restore your network environment quickly and affordably.

Services available from Progent's ransomware settlement negotiation experts include:

• Establishing the kind of ransomware involved in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Validating the hacker's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and schedule with the hacker
• Checking accordance with anti-money laundering (AML) laws
• Managing the crypto-currency transfer to the TA
• Receiving, reviewing, and using the hacker's decryptor tool
• If necessary, contacting the threat actor for technical help with the decryptor tool

• Quarantining infected endpoints to arrest the spread of the assault
• Making digital copies of each infected server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding anti-virus agents to all virus-free endpoints
• Restoring files from air-gapped restores or uncompromised endpoints
• Building a pristine recovery environment
• Remapping and connecting drives to match precisely their pre-attack condition

Settling Exfiltration Ransoms
Beyond extorting money for a decryption tool, current variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to steal (or "exfiltrate") information. Hackers can then require an extra settlement for not divulging this information on the dark web. Sadly, there exists no way to be certain that stolen data have been totally erased by the threat actor. Actually, in many cases the hacker has limited say over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for getting the advice of legal counsel, performing an inventory of data were stolen, and performing the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and onsite IT services throughout the United States for over two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have been awarded high-level certifications in foundation technology platforms including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security experts have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial management and Enterprise Resource Planning application software. This breadth of expertise gives Progent the ability to identify and consolidate the surviving parts of your information system after a ransomware intrusion and rebuild them quickly into a functioning system. Progent has worked with leading insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Rancho Cordova
To contact with Progent about crypto-ransomware settlement negotiation services in Rancho Cordova, phone Progent at 800-462-8800 or go to Contact Progent.