Ransomware Solutions Consultants

Progent's Ransomware Settlement Negotiation Services in Las Vegas
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex activity that requires a combination of real-word experience, technical knowledge and business acumen. It also demands working closely with the cyber-extortion target's IT staff and the insurance provider, if any. Because the top goal of the ransomware target is operational continuity, it is vital to deploy recovery teams that operate efficiently, in parallel, and in close communication. Progent offers the breadth of technical skills and the deep bench of experts to complement your network staff and restore your network quickly and economically.

Services offered by Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware used in the attack
• Identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Verifying the TA's decryption capabilities
• Budgeting a settlement with the ransomware victim and the insurance provider
• Establishing a settlement amount and timeline with the threat actor
• Verifying compliance with anti-money laundering (AML) laws
• Carrying out the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the threat actor's decryption tool
• If needed, contacting the hacker for assistance with the decryption utility

• Quarantining affected endpoints to prevent further spread of the attack
• Making replicas of each infected server and endpoint and data store in order to perform forensics without interfering with recovery
• Installing anti-virus agents to all clean endpoints
• Recovering files from offline restores or uncompromised machines
• Building a clean environment
• Remapping and reconnecting datastores to match precisely their pre-attack condition

Exfiltration Ransoms
In addition to demanding money for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") files. TAs can then require an additional ransom in exchange for not divulging this data or selling it. Unfortunately, there is no way to prove that exfiltrated data have been totally erased by the hacker. Actually, in numerous cases the hacker has limited control about where the information ends up. Paying an exfiltration ransom does not free you from the need for getting the advice of legal counsel, conducting an inventory of files were stolen, and performing the mandated alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned high-level certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial management and ERP software. This scope of skills gives Progent the ability to salvage and integrate the surviving pieces of your network after a ransomware assault and rebuild them rapidly into a viable system. Progent has worked with leading insurance providers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Las Vegas
To get in touch with Progent about ransomware settlement negotiation expertise in Las Vegas, phone Progent at 800-462-8800 or go to Contact Progent.