Ransomware Solutions Consultants

Progent's Ransomware Settlement Negotiation Services in Salt Lake City
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated activity that calls for a mix of real-word experience, technical skills and business acumen. It also demands working closely with the ransomware victim's IT team and the insurance carrier, if any. Because the number one goal of the ransomware target is operational continuity, it is critical to establish response groups that work efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of IT skills and the depth of experts to complement your network support team and restore your network quickly and affordably.

Services available from Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Testing the threat actor's decryption tool
• Budgeting a settlement range with the ransomware victim and the insurance provider
• Establishing a settlement amount and schedule with the hacker
• Verifying adherence to anti-money laundering (AML) sanctions
• Managing the crypto-currency payment to the hacker
• Acquiring, learning, and using the threat actor's decryptor utility
• If needed, contacting the TA for assistance with the decryptor utility

• Isolating affected endpoints to prevent further spread of the assault
• Creating replicas of each infected device and data store to allow forensics without interfering with recovery
• Installing A/V agents to all virus-free endpoints
• Restoring data from air-gapped backups or uncompromised machines
• Building a clean environment
• Remapping and connecting datastores to reflect precisely their pre-encryption condition

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor commonly try to exfiltrate information. TAs are then able to demand a separate payment in exchange for not posting this information on the dark web. Unfortunately, there is no method to prove that exfiltrated data have been completely deleted by the TA. In fact, in numerous instances the TA has limited control about who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, conducting an investigation into which data were taken, and carrying out the necessary notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite IT services across the U.S. for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have earned advanced certifications in core technologies such as Cisco networking, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning software. This broad array of skills allows Progent to salvage and integrate the undamaged pieces of your network after a ransomware intrusion and reconstruct them rapidly into a viable network. Progent has worked with top insurance carriers like Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Services in Salt Lake City
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Salt Lake City, phone Progent at 800-462-8800 or go to Contact Progent.