Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Austin
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex exercise that requires a mix of field experience, technical knowledge and business acumen. It also calls for working closely with the victim's IT team and the cyber insurance provider, if there is one. Because the number one goal of the ransomware target is fast recovery, it is critical to deploy response teams that work effectively, in parallel, and with intimate collaboration. Progent has the breadth of IT knowledge and the deep bench of experts to supplement your IT support team and restore your network quickly and economically.

Services available from Progent's ransomware settlement team include:

• Determining the kind of ransomware used in the assault
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Validating the TA's decryption tool
• Deciding on an acceptable settlement range with the victim and the insurance provider
• Establishing a settlement amount and schedule with the threat actor
• Verifying accordance with anti-money laundering laws
• Managing the crypto-currency payment to the TA
• Receiving, learning, and operating the TA's decryption utility
• If needed, contacting the TA for technical assistance with the decryptor utility

• Isolating infected endpoints and data stores to arrest the progress of the attack
• Making replicas of every breached device and data store to allow forensics without interfering with cleanup
• Installing anti-virus agents to all virus-free endpoints
• Recovering data from offline restores or unscathed machines
• Building a clean recovery environment
• Remapping and reconnecting drives to match exactly their pre-attack condition

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to steal (or "exfiltrate") files. Hackers can then require a separate payment in exchange for not posting this information on the dark web. Unfortunately, there exists no method to guarantee that stolen files have been totally erased by the threat actor. In fact, in many cases the threat actor has little control over the disposition of the data. Settling an exfiltration ransom does not free you from the need for engaging the advice of privacy attorneys, conducting an inventory of files were compromised, and carrying out the necessary alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services throughout the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have been awarded advanced certifications in foundation technologies such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning applications. This scope of expertise allows Progent to salvage and integrate the surviving parts of your information system after a ransomware assault and rebuild them quickly into an operational system. Progent has collaborated with leading cyber insurance providers like Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Austin
To get in touch with Progent about ransomware settlement negotiation expertise in Austin, call Progent at 800-462-8800 or go to Contact Progent.