Ransomware Response Consultants

Progent's Ransomware Negotiation Services in Corpus Christi
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex exercise that requires a combination of real-word experience, IT knowledge and business acumen. It also requires close co-operation with the ransomware victim's IT team and the cyber insurance provider, if there is one. Since the top priority of the ransomware victim is fast recovery, it is vital to deploy response teams that operate effectively, in parallel, and with intimate collaboration. Progent offers the scope of technical knowledge and the depth of personnel to supplement your IT staff and recover your network rapidly and economically.

Services offered by Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware used in the assault
• Identifying and contacting the hacker
• Assessing the recovery risk
• Testing the TA's decryption tool
• Agreeing on a settlement range with the ransomware victim and the insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Confirming adherence to anti-money laundering (AML) laws
• Carrying out the crypto-currency transfer to the TA
• Receiving, learning, and operating the hacker's decryption tool
• If necessary, contacting the TA for assistance with the decryptor utility

• Quarantining affected endpoints to arrest the spread of the assault
• Creating digital copies of every infected device and data store in order to perform forensics in parallel with restoration
• Installing anti-virus protection to all virus-free endpoints
• Recovering data from offline restores or unscathed endpoints
• Building a pristine environment
• Remapping and reconnecting datastores to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. Hackers are then able to demand a separate ransom for not divulging this information or selling it. Unfortunately, there exists no way to be certain that exfiltrated data have been totally erased by the TA. In fact, in numerous instances the hacker has limited say over data custody. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, performing an inventory of files were compromised, and carrying out the necessary alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite IT services across the U.S. for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technology platforms such as Cisco networking, VMware, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and Enterprise Resource Planning software. This scope of skills allows Progent to salvage and integrate the undamaged pieces of your IT environment following a ransomware assault and rebuild them quickly into an operational system. Progent has collaborated with leading cyber insurance providers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Corpus Christi
To get in touch with Progent about crypto-ransomware settlement expertise in Corpus Christi, phone Progent at 800-462-8800 or go to Contact Progent.