Ransomware Solutions Consultants

Progent's Ransomware Settlement Negotiation Services in Sacramento
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complex exercise that requires a combination of real-word experience, technical skills and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Since the number one priority of the ransomware target is fast recovery, it is critical to deploy recovery teams that operate effectively, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the depth of experts to supplement your network staff and restore your network rapidly and economically.

Services provided by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Assessing the recovery risk
• Validating the threat actor's decryption capabilities
• Agreeing on a settlement range with the ransomware victim and the cyber insurance provider
• Establishing a settlement and timeline with the hacker
• Verifying accordance with anti-money laundering regulations
• Managing the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the TA's decryptor utility
• If needed, contacting the threat actor for assistance with the decryptor tool

• Isolating infected endpoints to arrest the spread of the attack
• Creating replicas of every compromised server and endpoint and data store to allow forensics in parallel with cleanup
• Adding A/V agents to all clean endpoints
• Salvaging files from offline backups or unscathed machines
• Creating a pristine environment
• Mapping and reconnecting drives to reflect exactly their pre-encryption condition

Exfiltration Ransoms
Beyond extorting money for a decryption tool, current variants of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate information. Hackers are then able to require an additional payment for not divulging this data on the dark web. Unfortunately, there exists no method to be certain that exfiltrated files have been totally erased by the TA. Actually, in numerous instances the threat actor has little say about data custody. Paying an exfiltration ransom does not eliminate the need for getting the guidance of privacy attorneys, conducting an investigation into which files were taken, and performing the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services across the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have been awarded high-level certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned industry-recognized certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP software. This breadth of expertise gives Progent the ability to salvage and integrate the undamaged parts of your network following a ransomware attack and rebuild them quickly into a viable network. Progent has collaborated with top insurance carriers like Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Sacramento
To contact with Progent about ransomware settlement negotiation services in Sacramento, call Progent at 800-462-8800 or go to Contact Progent.