Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Chandler
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complicated activity that calls for a mix of real-word experience, technical skills and business savvy. It also calls for working closely with the ransomware victim's IT staff and the insurance carrier, if there is one. Because the top goal of the ransomware victim is operational continuity, it is vital to establish response groups that operate effectively, concurrently, and in close communication. Progent has the breadth of technical skills and the deep bench of experts to complement your IT support team and recover your network environment quickly and affordably.

Services available from Progent's ransomware settlement experts include:

• Determining the type of ransomware used in the assault
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Budgeting a settlement with the victim and the cyber insurance carrier
• Establishing a settlement and timeline with the hacker
• Confirming accordance with anti-money laundering sanctions
• Overseeing the crypto-currency transfer to the TA
• Receiving, learning, and using the threat actor's decryptor mechanism
• If needed, contacting the hacker for technical help with the decryptor utility

• Isolating infected endpoints and data stores to arrest the spread of the assault
• Creating digital copies of each infected device and data store to allow forensics without interfering with restoration
• Installing A/V agents to all clean endpoints
• Salvaging data from air-gapped backups or unscathed machines
• Creating a pristine recovery environment
• Remapping and reconnecting datastores to match exactly their pre-encryption state

Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") files. Hackers can then require an extra ransom for not posting this information on the dark web. Sadly, there is no method to be certain that stolen data have been totally deleted by the hacker. In fact, in numerous instances the TA has little control over where the information ends up. Settling an exfiltration ransom does not free you from the necessity of engaging the advice of privacy lawyers, conducting an inventory of data were taken, and performing the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and onsite IT services throughout the United States for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned advanced certifications in core technologies including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This broad array of skills gives Progent the ability to salvage and consolidate the surviving parts of your network after a ransomware assault and rebuild them quickly into a viable network. Progent has collaborated with leading cyber insurance carriers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Chandler
To get in touch with Progent about ransomware settlement negotiation guidance in Chandler, call Progent at 800-462-8800 or go to Contact Progent.