Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Valencia
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex activity that requires a mix of field experience, IT knowledge and business acumen. It also calls for working closely with the victim's IT team and the cyber insurance provider, if there is one. Since the top goal of the ransomware target is operational continuity, it is critical to establish recovery teams that operate effectively, concurrently, and in close communication. Progent has the breadth of technical knowledge and the deep bench of experts to supplement your network support team and recover your network rapidly and affordably.

Services provided by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware involved in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Validating the TA's decryption capabilities
• Determining a settlement with the victim and the cyber insurance provider
• Negotiating a settlement amount and schedule with the hacker
• Confirming accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the TA
• Receiving, reviewing, and using the TA's decryption utility
• If needed, contacting the TA for assistance with the decryptor utility

• Isolating infected endpoints and data stores to arrest the progress of the assault
• Making digital copies of every breached device and data store in order to perform forensics in parallel with recovery
• Adding anti-virus agents to all virus-free endpoints
• Salvaging data from air-gapped restores or unscathed endpoints
• Creating a clean environment
• Mapping and reconnecting drives to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to exfiltrate information. TAs are then able to require an extra ransom for not posting this information or selling it. Sadly, there exists no method to guarantee that stolen files have been completely erased by the threat actor. Actually, in many cases the threat actor has little control over where the information ends up. Settling an exfiltration ransom does not eliminate the need for getting the advice of privacy lawyers, conducting an audit on which data were compromised, and performing the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite IT services throughout the U.S. for more than 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have earned advanced certifications in foundation technologies such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP application software. This breadth of skills gives Progent the ability to identify and integrate the undamaged pieces of your IT environment following a ransomware intrusion and rebuild them quickly into a viable network. Progent has collaborated with leading insurance carriers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Valencia
To get in touch with Progent about ransomware settlement guidance in Valencia, phone Progent at 800-462-8800 or go to Contact Progent.