Ransomware Solutions Services

Progent's Ransomware Negotiation Services in Anaheim
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated exercise that requires a combination of real-word experience, technical skills and business acumen. It also demands close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Since the top priority of the ransomware victim is fast recovery, it is critical to establish recovery teams that operate efficiently, concurrently, and in close communication. Progent offers the scope of IT knowledge and the depth of personnel to supplement your IT staff and recover your network environment rapidly and economically.

Services provided by Progent's ransomware negotiation team include:

• Establishing the type of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Testing the TA's decryption capabilities
• Determining a settlement payment with the victim and the insurance provider
• Negotiating a settlement and schedule with the hacker
• Checking adherence to anti-money laundering laws
• Carrying out the crypto-currency payment to the hacker
• Receiving, reviewing, and using the hacker's decryption tool
• If needed, contacting the TA for assistance with the decryptor utility

• Isolating affected endpoints and data stores to prevent further spread of the attack
• Creating digital copies of each infected server and endpoint and data store to allow forensics in parallel with recovery
• Installing A/V protection to all clean endpoints
• Salvaging data from air-gapped restores or uncompromised endpoints
• Building a pristine recovery environment
• Mapping and reconnecting drives to match precisely their pre-attack condition

Exfiltration Ransoms
Beyond demanding money for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate files. Hackers are then able to demand a separate ransom for not posting this data or selling it. Sadly, there exists no way to guarantee that stolen data have been completely deleted by the threat actor. In fact, in many instances the hacker has little control about data custody. Paying an exfiltration ransom does not free you from the need for getting the guidance of privacy attorneys, performing an investigation into which files were stolen, and carrying out the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises IT services across the United States for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have been awarded advanced certifications in foundation technologies such as Cisco infrastructure, VMware, and major distributions of Linux. Progent's data security consultants have earned industry-recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and Enterprise Resource Planning software. This breadth of expertise allows Progent to identify and consolidate the surviving parts of your information system following a ransomware attack and rebuild them quickly into a functioning network. Progent has worked with leading cyber insurance carriers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Anaheim
To get in touch with Progent about crypto-ransomware settlement guidance in Anaheim, call Progent at 800-462-8800 or go to Contact Progent.