Ransomware Solutions Consultants

Progent's Ransomware Settlement Negotiation Consulting in Anchorage
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated activity that calls for a combination of real-word experience, technical knowledge and business acumen. It also demands close co-operation with the victim's IT team and the cyber insurance provider, if any. Since the number one goal of the ransomware target is fast recovery, it is vital to establish recovery teams that operate effectively, in parallel, and in close communication. Progent offers the scope of IT knowledge and the deep bench of experts to supplement your network support team and restore your network rapidly and economically.

Services provided by Progent's ransomware settlement team include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Deciding on an acceptable settlement with the ransomware victim and the cyber insurance provider
• Establishing a settlement amount and timeline with the TA
• Verifying compliance with anti-money laundering laws
• Overseeing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the TA's decryptor mechanism
• If needed, contacting the TA for technical assistance with the decryptor tool

• Isolating affected endpoints and data stores to arrest the progress of the attack
• Making digital copies of every compromised device and data store to allow forensics in parallel with recovery
• Adding A/V protection to all clean endpoints
• Recovering files from air-gapped restores or uncompromised machines
• Building a pristine recovery environment
• Remapping and connecting drives to reflect exactly their pre-encryption condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") information. TAs can then require a separate settlement for not posting this information or selling it. Unfortunately, there is no way to guarantee that stolen files have been completely deleted by the threat actor. In fact, in many instances the hacker has little control over the disposition of the data. Paying an exfiltration ransom does not free you from the need for getting the advice of legal counsel, performing an audit on which data were stolen, and sending the required notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises IT services across the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technologies including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This scope of expertise allows Progent to identify and consolidate the undamaged parts of your network following a ransomware intrusion and reconstruct them rapidly into a functioning network. Progent has worked with top insurance carriers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Anchorage
To contact with Progent about crypto-ransomware settlement services in Anchorage, phone Progent at 800-462-8800 or go to Contact Progent.