Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Fresno
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated activity that requires a combination of field experience, technical knowledge and business savvy. It also demands close co-operation with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the top priority of the ransomware target is fast recovery, it is vital to establish recovery teams that work efficiently, concurrently, and with intimate collaboration. Progent has the scope of IT knowledge and the deep bench of experts to supplement your network support team and restore your network environment quickly and affordably.

Support offered by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Assessing the recovery risk
• Verifying the threat actor's decryption tool
• Deciding on an acceptable settlement payment with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the TA
• Verifying compliance with anti-money laundering regulations
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and using the hacker's decryptor utility
• If needed, contacting the hacker for technical assistance with the decryption utility

• Isolating affected endpoints to arrest the progress of the attack
• Creating digital copies of each infected device and data store in order to perform forensics without interfering with recovery
• Adding A/V protection to all virus-free endpoints
• Restoring files from air-gapped backups or uncompromised endpoints
• Creating a pristine environment
• Mapping and reconnecting drives to reflect exactly their pre-encryption condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") information. TAs are then able to require an extra payment for not posting this data or selling it. Sadly, there is no way to prove that stolen files have been totally deleted by the TA. In fact, in many instances the threat actor has little control about the disposition of the data. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, performing an investigation into which files were taken, and sending the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite network services across the U.S. for over 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes consultants who have earned advanced certifications in core technologies such as Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and Enterprise Resource Planning application software. This broad array of expertise gives Progent the ability to identify and consolidate the undamaged pieces of your network following a ransomware intrusion and rebuild them quickly into a viable network. Progent has worked with top insurance providers including Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Fresno
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Fresno, call Progent at 800-462-8800 or go to Contact Progent.