Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Consulting in Spokane
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complicated exercise that requires a combination of field experience, technical skills and business savvy. It also requires close co-operation with the cyber-extortion target's IT team and the insurance provider, if any. Because the top priority of the ransomware target is fast recovery, it is vital to deploy recovery teams that work efficiently, concurrently, and in close communication. Progent offers the scope of IT knowledge and the depth of personnel to complement your network staff and recover your network rapidly and economically.

Support available from Progent's ransomware settlement experts include:

• Establishing the kind of ransomware used in the assault
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Testing the TA's decryption tool
• Agreeing on a settlement amount with the victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the hacker
• Verifying accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency disbursement to the hacker
• Receiving, learning, and using the hacker's decryption mechanism
• If necessary, contacting the hacker for assistance with the decryption utility

• Isolating affected endpoints to prevent further spread of the assault
• Creating replicas of every compromised server and endpoint and data store to allow forensics in parallel with recovery
• Installing A/V agents to all clean endpoints
• Restoring files from air-gapped restores or unscathed endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting datastores to reflect precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") files. Hackers are then able to require a separate settlement in exchange for not posting this data or selling it. Unfortunately, there exists no way to be certain that stolen data have been totally deleted by the hacker. Actually, in many cases the TA has little control over the disposition of the data. Settling an exfiltration ransom does not eliminate the need for getting the advice of privacy lawyers, performing an audit on which data were compromised, and carrying out the mandated alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises network services throughout the United States for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have been awarded advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity experts have earned prestigious certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP applications. This broad array of expertise allows Progent to salvage and consolidate the undamaged pieces of your network following a ransomware intrusion and rebuild them rapidly into a viable network. Progent has worked with leading insurance providers including Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Spokane
To contact with Progent about crypto-ransomware settlement services in Spokane, call Progent at 800-462-8800 or go to Contact Progent.