Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in Riverside
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complex activity that calls for a mix of field experience, IT skills and business acumen. It also demands working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if any. Because the top priority of the ransomware target is fast recovery, it is critical to deploy response teams that work efficiently, concurrently, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of personnel to supplement your network support team and recover your network environment rapidly and affordably.

Services provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Validating the TA's decryption tool
• Deciding on an acceptable settlement range with the victim and the insurance carrier
• Establishing a settlement and timeline with the TA
• Confirming adherence to anti-money laundering (AML) laws
• Managing the crypto-currency payment to the TA
• Acquiring, reviewing, and using the TA's decryptor utility
• If necessary, contacting the hacker for technical assistance with the decryption tool

• Isolating affected endpoints and data stores to prevent further spread of the assault
• Making replicas of each breached device and data store in order to perform forensics without interfering with recovery
• Installing A/V protection to all clean endpoints
• Salvaging files from offline backups or uncompromised machines
• Creating a pristine recovery environment
• Remapping and connecting datastores to match exactly their pre-encryption condition

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption tool, current strains of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often try to exfiltrate information. Hackers can then require a separate settlement in exchange for not posting this information on the dark web. Sadly, there exists no way to guarantee that stolen data have been completely erased by the hacker. Actually, in many instances the hacker has limited say about the disposition of the data. Paying an exfiltration ransom does not free you from the need for getting the advice of privacy lawyers, conducting an audit on which data were taken, and sending the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite network services across the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have earned advanced certifications in core technologies including Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP applications. This scope of expertise gives Progent the ability to identify and integrate the undamaged parts of your IT environment after a ransomware attack and reconstruct them quickly into a viable network. Progent has collaborated with leading cyber insurance carriers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Services in Riverside
To contact with Progent about crypto-ransomware settlement services in Riverside, phone Progent at 800-462-8800 or go to Contact Progent.