Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in Portland
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complex exercise that calls for a mix of real-word experience, technical skills and business acumen. It also calls for close co-operation with the victim's IT team and the insurance carrier, if there is one. Since the top goal of the ransomware target is operational continuity, it is vital to establish response teams that operate efficiently, concurrently, and in close communication. Progent has the breadth of technical knowledge and the deep bench of experts to complement your IT support team and restore your network environment rapidly and economically.

Services offered by Progent's ransomware settlement team include:

• Establishing the type of ransomware used in the attack
• Making contact with the hacker persona
• Assessing the recovery risk
• Verifying the TA's decryption tool
• Determining a settlement payment with the ransomware victim and the insurance provider
• Negotiating a settlement and schedule with the threat actor
• Checking compliance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency disbursement to the TA
• Receiving, reviewing, and operating the threat actor's decryption tool
• If necessary, contacting the TA for technical assistance with the decryption tool

• Quarantining affected endpoints to arrest the progress of the attack
• Creating replicas of each compromised server and endpoint and data store in order to perform forensics without interfering with cleanup
• Adding A/V protection to all virus-free endpoints
• Salvaging data from offline restores or unscathed machines
• Building a pristine environment
• Mapping and reconnecting drives to reflect precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") files. Hackers can then demand a separate ransom for not publishing this data on the dark web. Sadly, there exists no way to prove that exfiltrated data have been totally deleted by the hacker. In fact, in numerous instances the threat actor has little say about data custody. Settling an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy attorneys, performing an audit on which files were stolen, and performing the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and on-premises IT services throughout the U.S. for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have been awarded advanced certifications in foundation technology platforms including Cisco networking, VMware virtualization, and major Linux distros. Progent's data security consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning applications. This broad array of expertise gives Progent the ability to salvage and integrate the undamaged parts of your network following a ransomware attack and reconstruct them rapidly into a viable system. Progent has worked with leading cyber insurance carriers including Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Portland
To get in touch with Progent about ransomware settlement negotiation expertise in Portland, call Progent at 800-462-8800 or go to Contact Progent.