Ransomware Response Services

Progent's Ransomware Settlement Negotiation Services in Hayward
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complicated activity that calls for a mix of field experience, technical skills and business savvy. It also calls for working closely with the ransomware victim's IT staff and the insurance provider, if any. Since the top priority of the ransomware victim is fast recovery, it is critical to deploy recovery teams that work efficiently, concurrently, and in close communication. Progent has the breadth of IT knowledge and the deep bench of personnel to supplement your IT staff and restore your network environment quickly and economically.

Services provided by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Testing the hacker's decryption capabilities
• Determining a settlement with the victim and the insurance carrier
• Establishing a settlement and timeline with the TA
• Verifying accordance with anti-money laundering regulations
• Managing the crypto-currency transfer to the hacker
• Acquiring, learning, and operating the TA's decryptor utility
• If needed, contacting the TA for assistance with the decryptor utility

• Quarantining infected endpoints and data stores to arrest the spread of the attack
• Creating digital copies of every compromised device and data store in order to perform forensics without interfering with recovery
• Installing A/V agents to all virus-free endpoints
• Recovering files from air-gapped backups or uncompromised endpoints
• Creating a pristine environment
• Remapping and reconnecting drives to reflect precisely their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly attempt to steal (or "exfiltrate") information. Hackers are then able to require an extra ransom for not divulging this information or selling it. Unfortunately, there exists no way to guarantee that stolen files have been completely deleted by the TA. Actually, in many cases the TA has little say over who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of engaging the advice of privacy lawyers, performing an inventory of files were compromised, and sending the required notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises network services across the United States for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial management and ERP application software. This breadth of expertise gives Progent the ability to salvage and consolidate the undamaged pieces of your network after a ransomware attack and reconstruct them quickly into an operational network. Progent has worked with leading insurance carriers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Hayward
To get in touch with Progent about ransomware settlement negotiation guidance in Hayward, phone Progent at 800-462-8800 or go to Contact Progent.