Ransomware Response Consultants

Progent's Ransomware Negotiation Consulting in Eugene
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex exercise that requires a mix of real-word experience, IT knowledge and business acumen. It also requires working closely with the cyber-extortion target's IT staff and the insurance provider, if there is one. Because the top goal of the ransomware victim is fast recovery, it is vital to establish response groups that work effectively, in parallel, and with intimate collaboration. Progent has the scope of technical skills and the depth of personnel to supplement your IT staff and restore your network quickly and economically.

Support offered by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the assault
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Verifying the TA's decryption capabilities
• Budgeting a settlement amount with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Verifying accordance with anti-money laundering (AML) laws
• Carrying out the crypto-currency transfer to the TA
• Receiving, learning, and using the threat actor's decryptor tool
• If necessary, contacting the hacker for assistance with the decryption tool

• Quarantining infected endpoints and data stores to arrest the spread of the assault
• Creating replicas of every infected server and endpoint and data store in order to perform forensics without interfering with recovery
• Adding A/V protection to all virus-free endpoints
• Restoring data from air-gapped restores or unscathed endpoints
• Creating a pristine recovery environment
• Remapping and connecting datastores to match exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate files. TAs are then able to demand an extra ransom for not divulging this data on the dark web. Sadly, there is no method to guarantee that exfiltrated data have been totally erased by the hacker. Actually, in many instances the threat actor has limited control about data custody. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of privacy attorneys, conducting an audit on which data were taken, and performing the necessary notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises IT services across the U.S. for over two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have earned advanced certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial management and Enterprise Resource Planning applications. This scope of expertise gives Progent the ability to salvage and consolidate the undamaged pieces of your IT environment after a ransomware attack and reconstruct them quickly into an operational network. Progent has collaborated with leading insurance carriers including Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Eugene
To contact with Progent about ransomware settlement negotiation guidance in Eugene, call Progent at 800-462-8800 or go to Contact Progent.