Ransomware Response Services

Progent's Ransomware Settlement Negotiation Services in Lubbock
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that calls for a combination of real-word experience, technical knowledge and business acumen. It also demands close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Because the number one goal of the ransomware target is fast recovery, it is critical to deploy response groups that operate effectively, in parallel, and with intimate collaboration. Progent has the breadth of IT skills and the deep bench of experts to supplement your IT staff and recover your network environment rapidly and economically.

Support available from Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Agreeing on a settlement range with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and schedule with the TA
• Verifying adherence to anti-money laundering laws
• Overseeing the crypto-currency payment to the TA
• Receiving, reviewing, and operating the hacker's decryption mechanism
• If needed, contacting the TA for technical help with the decryption tool

• Isolating affected endpoints and data stores to prevent further progress of the attack
• Creating replicas of every compromised device and data store in order to perform forensics without interfering with restoration
• Installing anti-virus agents to all clean endpoints
• Restoring data from offline restores or unscathed endpoints
• Building a clean recovery environment
• Mapping and reconnecting drives to match precisely their pre-encryption condition

Settling Exfiltration Ransoms
In addition to demanding money for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. TAs are then able to require an extra payment for not publishing this information on the dark web. Unfortunately, there is no way to be certain that stolen data have been totally deleted by the threat actor. Actually, in numerous instances the threat actor has little say over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy attorneys, performing an audit on which data were compromised, and sending the necessary alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite network services throughout the United States for over 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning software. This broad array of skills gives Progent the ability to salvage and integrate the surviving parts of your network after a ransomware attack and rebuild them rapidly into a functioning system. Progent has worked with top insurance providers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Lubbock
To get in touch with Progent about ransomware settlement negotiation guidance in Lubbock, call Progent at 800-462-8800 or go to Contact Progent.