Ransomware Solutions Consultants

Progent's Ransomware Negotiation Consulting in Dallas
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that calls for a mix of real-word experience, technical knowledge and business acumen. It also demands working closely with the ransomware victim's IT team and the cyber insurance provider, if there is one. Since the top priority of the ransomware victim is fast recovery, it is vital to deploy response teams that operate effectively, in parallel, and in close communication. Progent has the breadth of IT knowledge and the deep bench of experts to complement your network support team and restore your network environment quickly and economically.

Support offered by Progent's ransomware negotiation team include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Validating the threat actor's decryption tool
• Agreeing on a settlement with the ransomware victim and the insurance provider
• Negotiating a settlement and timeline with the hacker
• Verifying accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the threat actor's decryptor mechanism
• If necessary, contacting the hacker for assistance with the decryption utility

• Quarantining affected endpoints and data stores to arrest the progress of the attack
• Making replicas of each breached server and endpoint and data store in order to perform forensics in parallel with cleanup
• Installing anti-virus protection to all clean endpoints
• Restoring data from offline backups or uncompromised endpoints
• Building a clean environment
• Mapping and connecting datastores to match precisely their pre-attack condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current variants of ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate files. TAs can then demand an extra ransom in exchange for not divulging this data or selling it. Sadly, there is no way to be certain that stolen files have been completely deleted by the threat actor. In fact, in numerous instances the threat actor has little control about where the information ends up. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy attorneys, performing an audit on which data were compromised, and sending the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite network services across the United States for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technology platforms such as Cisco networking, VMware virtualization, and major Linux distros. Progent's data security consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP application software. This scope of expertise allows Progent to salvage and integrate the undamaged parts of your network following a ransomware attack and reconstruct them quickly into a functioning network. Progent has collaborated with top cyber insurance carriers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Dallas
To contact with Progent about ransomware settlement negotiation expertise in Dallas, call Progent at 800-462-8800 or go to Contact Progent.