Ransomware Solutions Consultants

Progent's Ransomware Negotiation Services in Mission Viejo
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complex activity that requires a combination of field experience, technical skills and business savvy. It also calls for working closely with the cyber-extortion target's IT team and the insurance carrier, if any. Since the top goal of the ransomware target is operational continuity, it is vital to establish response teams that operate effectively, in parallel, and with intimate collaboration. Progent offers the scope of IT skills and the deep bench of personnel to complement your IT staff and restore your network environment rapidly and economically.

Services provided by Progent's ransomware negotiation team include:

• Determining the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Testing the TA's decryption tool
• Determining a settlement payment with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and schedule with the threat actor
• Verifying accordance with anti-money laundering regulations
• Carrying out the crypto-currency disbursement to the TA
• Receiving, reviewing, and using the TA's decryptor utility
• If necessary, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining infected endpoints to arrest the progress of the assault
• Creating digital copies of every breached server and endpoint and data store to allow forensics in parallel with recovery
• Installing A/V protection to all virus-free endpoints
• Restoring files from offline backups or uncompromised machines
• Building a clean recovery environment
• Mapping and reconnecting datastores to reflect exactly their pre-encryption state

Exfiltration Ransoms
In addition to demanding money for a decryption utility, current variants of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to steal (or "exfiltrate") files. TAs can then demand a separate payment for not publishing this data on the dark web. Unfortunately, there is no way to guarantee that stolen data have been completely deleted by the TA. In fact, in many instances the threat actor has limited control about who can access the stolen files. Paying an exfiltration ransom does not free you from the necessity of seeking the advice of privacy lawyers, performing an audit on which files were taken, and performing the necessary notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the U.S. for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned prestigious certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and ERP applications. This broad array of skills gives Progent the ability to salvage and consolidate the surviving pieces of your information system following a ransomware intrusion and rebuild them quickly into a viable system. Progent has collaborated with leading insurance providers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Mission Viejo
To get in touch with Progent about ransomware settlement negotiation guidance in Mission Viejo, phone Progent at 800-462-8800 or go to Contact Progent.