Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Consulting in Anchorage
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that calls for a combination of field experience, IT skills and business savvy. It also requires close co-operation with the victim's IT team and the cyber insurance carrier, if any. Because the number one goal of the ransomware victim is operational continuity, it is critical to deploy response teams that operate efficiently, in parallel, and in close communication. Progent has the breadth of IT skills and the deep bench of experts to complement your network staff and restore your network rapidly and economically.

Support offered by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Testing the TA's decryption capabilities
• Determining a settlement amount with the ransomware victim and the insurance carrier
• Negotiating a settlement amount and timeline with the TA
• Verifying adherence to anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the hacker's decryptor mechanism
• If necessary, contacting the threat actor for technical help with the decryptor utility

• Isolating affected endpoints and data stores to prevent further spread of the assault
• Making replicas of every compromised device and data store to allow forensics without interfering with restoration
• Installing A/V protection to all virus-free endpoints
• Recovering files from air-gapped restores or unscathed machines
• Building a clean recovery environment
• Mapping and reconnecting datastores to reflect exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to exfiltrate information. Hackers can then demand an additional ransom in exchange for not publishing this data or selling it. Sadly, there exists no method to prove that stolen data have been totally erased by the threat actor. In fact, in many instances the TA has little say about the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy attorneys, performing an investigation into which data were taken, and sending the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and on-premises IT services throughout the United States for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned high-level certifications in core technologies including Cisco networking, VMware, and popular Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning software. This broad array of expertise allows Progent to identify and integrate the surviving parts of your information system after a ransomware intrusion and reconstruct them quickly into a viable system. Progent has worked with top cyber insurance carriers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Anchorage
To get in touch with Progent about ransomware settlement negotiation expertise in Anchorage, phone Progent at 800-462-8800 or go to Contact Progent.