Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Austin
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex exercise that calls for a mix of field experience, IT skills and business acumen. It also calls for working closely with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Since the top priority of the ransomware target is operational continuity, it is vital to deploy recovery teams that operate efficiently, in parallel, and in close communication. Progent offers the scope of technical knowledge and the deep bench of personnel to complement your network staff and recover your network quickly and affordably.

Support available from Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the attack
• Making contact with the hacker persona
• Evaluating the recovery risk
• Verifying the hacker's decryption tool
• Deciding on an acceptable settlement amount with the victim and the cyber insurance provider
• Establishing a settlement and schedule with the TA
• Confirming adherence to anti-money laundering (AML) sanctions
• Overseeing the crypto-currency disbursement to the TA
• Acquiring, learning, and operating the hacker's decryption utility
• If necessary, contacting the threat actor for assistance with the decryptor utility

• Quarantining infected endpoints and data stores to prevent further progress of the assault
• Making digital copies of every breached device and data store in order to perform forensics without interfering with recovery
• Adding anti-virus protection to all virus-free endpoints
• Salvaging files from offline restores or uncompromised endpoints
• Creating a pristine environment
• Remapping and reconnecting datastores to reflect precisely their pre-attack state

Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often try to exfiltrate files. Hackers can then demand an extra ransom for not posting this data or selling it. Unfortunately, there is no method to guarantee that exfiltrated data have been totally erased by the threat actor. In fact, in numerous instances the hacker has little control about where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy attorneys, conducting an audit on which files were stolen, and sending the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises IT services throughout the U.S. for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have been awarded advanced certifications in core technologies such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial management and ERP software. This scope of skills gives Progent the ability to salvage and integrate the surviving pieces of your information system after a ransomware attack and rebuild them quickly into a viable system. Progent has worked with leading insurance providers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Austin
To contact with Progent about ransomware settlement negotiation guidance in Austin, call Progent at 800-462-8800 or go to Contact Progent.