Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Consulting in Roseville
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complex exercise that calls for a mix of real-word experience, technical knowledge and business acumen. It also demands close co-operation with the cyber-extortion target's IT staff and the cyber insurance carrier, if any. Because the number one goal of the ransomware target is fast recovery, it is vital to establish recovery groups that work effectively, in parallel, and in close communication. Progent offers the scope of IT knowledge and the deep bench of experts to complement your IT support team and recover your network rapidly and economically.

Support available from Progent's ransomware settlement experts include:

• Determining the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Verifying the threat actor's decryption capabilities
• Agreeing on a settlement with the victim and the cyber insurance provider
• Establishing a settlement and schedule with the hacker
• Checking compliance with anti-money laundering laws
• Overseeing the crypto-currency payment to the hacker
• Receiving, learning, and operating the hacker's decryption mechanism
• If needed, contacting the TA for assistance with the decryption tool

• Isolating infected endpoints and data stores to arrest the progress of the attack
• Creating replicas of every breached device and data store in order to perform forensics in parallel with recovery
• Adding anti-virus protection to all clean endpoints
• Recovering files from offline restores or uncompromised endpoints
• Building a pristine recovery environment
• Remapping and connecting drives to match precisely their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption utility, current variants of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") files. TAs are then able to require a separate ransom in exchange for not divulging this data on the dark web. Sadly, there exists no method to be certain that exfiltrated data have been completely deleted by the TA. In fact, in numerous instances the TA has limited say over the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of engaging the guidance of privacy lawyers, performing an investigation into which files were compromised, and carrying out the necessary alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have been awarded high-level certifications in core technology platforms such as Cisco networking, VMware, and popular Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and ERP applications. This scope of skills allows Progent to salvage and consolidate the undamaged pieces of your IT environment following a ransomware attack and reconstruct them quickly into a viable network. Progent has worked with top cyber insurance carriers like Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Roseville
To contact with Progent about ransomware settlement services in Roseville, phone Progent at 800-462-8800 or go to Contact Progent.