Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in Boise
Progent has experience negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated exercise that calls for a combination of real-word experience, IT knowledge and business savvy. It also demands working closely with the cyber-extortion target's IT team and the insurance carrier, if there is one. Since the top priority of the ransomware victim is operational continuity, it is critical to establish response groups that operate effectively, concurrently, and in close communication. Progent offers the scope of technical knowledge and the depth of experts to complement your network support team and restore your network environment quickly and economically.

Services provided by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Testing the hacker's decryption tool
• Determining a settlement range with the ransomware victim and the cyber insurance provider
• Establishing a settlement amount and timeline with the threat actor
• Verifying adherence to anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the threat actor's decryption utility
• If needed, contacting the hacker for technical help with the decryptor utility

• Isolating affected endpoints and data stores to arrest the spread of the assault
• Creating replicas of each infected server and endpoint and data store in order to perform forensics in parallel with restoration
• Adding A/V agents to all clean endpoints
• Recovering files from air-gapped restores or unscathed endpoints
• Creating a pristine environment
• Remapping and connecting drives to reflect exactly their pre-attack state

Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern variants of ransomware like Ryuk, Maze, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") files. Hackers can then require an extra settlement for not posting this information or selling it. Unfortunately, there exists no way to guarantee that stolen data have been completely erased by the TA. Actually, in many instances the TA has limited say over who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy attorneys, performing an investigation into which files were compromised, and performing the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite IT services across the U.S. for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This breadth of skills allows Progent to salvage and integrate the undamaged parts of your information system following a ransomware attack and rebuild them quickly into a viable system. Progent has collaborated with leading insurance providers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Boise
To contact with Progent about ransomware settlement negotiation guidance in Boise, call Progent at 800-462-8800 or go to Contact Progent.