Ransomware Response Consultants

Progent's Ransomware Negotiation Consulting in Long Beach
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex exercise that requires a mix of field experience, technical skills and business acumen. It also calls for close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Because the top goal of the ransomware victim is fast recovery, it is critical to deploy response groups that work efficiently, in parallel, and in close communication. Progent has the breadth of IT skills and the deep bench of experts to supplement your IT staff and recover your network quickly and affordably.

Services offered by Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Testing the threat actor's decryption capabilities
• Agreeing on a settlement payment with the victim and the insurance provider
• Negotiating a settlement and schedule with the TA
• Verifying accordance with anti-money laundering (AML) laws
• Overseeing the crypto-currency disbursement to the hacker
• Receiving, reviewing, and using the TA's decryption utility
• If necessary, contacting the TA for assistance with the decryptor tool

• Quarantining affected endpoints and data stores to arrest the spread of the attack
• Making digital copies of each breached server and endpoint and data store in order to perform forensics in parallel with cleanup
• Adding anti-virus agents to all clean endpoints
• Restoring files from offline backups or unscathed machines
• Creating a pristine environment
• Mapping and reconnecting drives to match precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to exfiltrate files. Hackers are then able to require an additional ransom for not publishing this information on the dark web. Unfortunately, there is no method to be certain that exfiltrated files have been totally deleted by the hacker. In fact, in many cases the TA has limited control over the disposition of the data. Settling an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, conducting an audit on which data were stolen, and sending the mandated notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises network services across the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have earned high-level certifications in core technologies such as Cisco networking, VMware, and popular distributions of Linux. Progent's data security consultants have earned prestigious certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning application software. This scope of expertise gives Progent the ability to identify and integrate the undamaged parts of your information system after a ransomware assault and reconstruct them quickly into a functioning system. Progent has collaborated with top cyber insurance carriers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Services in Long Beach
To contact with Progent about crypto-ransomware settlement guidance in Long Beach, phone Progent at 800-462-8800 or go to Contact Progent.