Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Salem
Progent has experience negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated activity that requires a mix of real-word experience, technical skills and business acumen. It also requires working closely with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Because the number one goal of the ransomware target is operational continuity, it is vital to establish response groups that operate efficiently, concurrently, and with intimate collaboration. Progent has the breadth of technical knowledge and the deep bench of experts to complement your IT staff and recover your network rapidly and affordably.

Support provided by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware used in the attack
• Making contact with the hacker
• Evaluating the recovery risk
• Validating the hacker's decryption tool
• Budgeting a settlement payment with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and timeline with the hacker
• Confirming accordance with anti-money laundering laws
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, learning, and using the TA's decryptor mechanism
• If needed, contacting the TA for technical help with the decryptor utility

• Quarantining affected endpoints to prevent further spread of the assault
• Making replicas of every compromised server and endpoint and data store in order to perform forensics in parallel with restoration
• Adding anti-virus agents to all clean endpoints
• Recovering data from offline restores or uncompromised machines
• Creating a clean recovery environment
• Remapping and reconnecting drives to match precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, current strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") files. TAs are then able to demand a separate payment for not publishing this data or selling it. Unfortunately, there exists no way to guarantee that stolen files have been completely erased by the threat actor. Actually, in many instances the threat actor has little say about where the information ends up. Settling an exfiltration ransom does not free you from the need for seeking the advice of privacy attorneys, conducting an audit on which data were stolen, and sending the required alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises network services across the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have earned advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This broad array of skills allows Progent to identify and consolidate the undamaged parts of your information system following a ransomware attack and rebuild them rapidly into a functioning system. Progent has collaborated with top cyber insurance carriers like Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Salem
To get in touch with Progent about ransomware settlement guidance in Salem, call Progent at 800-462-8800 or go to Contact Progent.