Ransomware Response Services

Overview of Progent's Ransomware Negotiation Consulting in Huntington Beach
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complicated exercise that calls for a mix of field experience, IT skills and business acumen. It also demands close co-operation with the ransomware victim's IT team and the cyber insurance carrier, if any. Since the number one priority of the ransomware target is fast recovery, it is vital to establish recovery teams that work effectively, concurrently, and with intimate collaboration. Progent has the scope of IT knowledge and the depth of personnel to complement your network staff and restore your network environment quickly and economically.

Support offered by Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware involved in the assault
• Identifying and contacting the hacker
• Assessing the recovery risk
• Testing the TA's decryption tool
• Deciding on an acceptable settlement range with the victim and the cyber insurance provider
• Negotiating a settlement amount and timeline with the TA
• Checking adherence to anti-money laundering laws
• Managing the crypto-currency disbursement to the TA
• Receiving, learning, and using the TA's decryption utility
• If necessary, contacting the hacker for technical assistance with the decryption utility

• Quarantining affected endpoints to arrest the spread of the assault
• Creating replicas of every breached server and endpoint and data store to allow forensics in parallel with recovery
• Adding anti-virus protection to all clean endpoints
• Restoring data from offline restores or uncompromised machines
• Creating a pristine recovery environment
• Mapping and connecting drives to match precisely their pre-encryption condition

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") information. TAs are then able to demand an extra payment in exchange for not publishing this information on the dark web. Unfortunately, there exists no way to prove that exfiltrated files have been completely erased by the threat actor. Actually, in many instances the TA has little control over data custody. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of legal counsel, performing an inventory of data were compromised, and performing the necessary notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises IT services throughout the U.S. for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned advanced certifications in core technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP application software. This breadth of expertise allows Progent to identify and consolidate the undamaged parts of your network after a ransomware intrusion and rebuild them rapidly into a functioning system. Progent has worked with top insurance providers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Huntington Beach
To get in touch with Progent about ransomware settlement negotiation expertise in Huntington Beach, call Progent at 800-462-8800 or go to Contact Progent.