Ransomware Solutions Services

Progent's Ransomware Negotiation Consulting in Santa Cruz
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that requires a combination of field experience, IT skills and business savvy. It also calls for working closely with the ransomware victim's IT staff and the insurance carrier, if there is one. Since the number one priority of the ransomware victim is fast recovery, it is vital to establish recovery teams that operate efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of technical skills and the deep bench of experts to supplement your IT staff and restore your network quickly and economically.

Support available from Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware involved in the assault
• Making contact with the hacker persona
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Deciding on an acceptable settlement payment with the victim and the insurance carrier
• Establishing a settlement amount and schedule with the TA
• Checking accordance with anti-money laundering regulations
• Managing the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the threat actor's decryption mechanism
• If necessary, contacting the threat actor for technical assistance with the decryptor tool

• Isolating affected endpoints and data stores to arrest the progress of the attack
• Creating replicas of each compromised device and data store to allow forensics in parallel with cleanup
• Installing A/V agents to all clean endpoints
• Salvaging files from offline backups or uncompromised endpoints
• Creating a clean environment
• Remapping and reconnecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern variants of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate information. Hackers can then demand a separate payment for not posting this information or selling it. Unfortunately, there is no method to be certain that stolen data have been totally erased by the TA. Actually, in many cases the threat actor has limited say about who can access the stolen files. Paying an exfiltration ransom does not free you from the need for seeking the advice of privacy lawyers, conducting an audit on which files were taken, and carrying out the necessary notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises IT services throughout the U.S. for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned high-level certifications in core technology platforms such as Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and Enterprise Resource Planning applications. This broad array of skills gives Progent the ability to identify and integrate the undamaged pieces of your network after a ransomware attack and rebuild them rapidly into an operational system. Progent has worked with leading insurance carriers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Santa Cruz
To get in touch with Progent about ransomware settlement negotiation guidance in Santa Cruz, call Progent at 800-462-8800 or go to Contact Progent.