Ransomware Solutions Consulting Experts

Progent's Ransomware Negotiation Services in Salt Lake City
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complicated exercise that requires a mix of field experience, technical skills and business savvy. It also demands close co-operation with the victim's IT staff and the insurance provider, if any. Because the number one goal of the ransomware target is operational continuity, it is critical to deploy response teams that work effectively, in parallel, and in close communication. Progent offers the scope of technical skills and the depth of personnel to supplement your network staff and restore your network quickly and affordably.

Services provided by Progent's ransomware settlement team include:

• Establishing the type of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Determining a settlement amount with the victim and the insurance carrier
• Establishing a settlement amount and schedule with the TA
• Verifying compliance with anti-money laundering (AML) regulations
• Managing the crypto-currency payment to the TA
• Receiving, learning, and using the TA's decryptor utility
• If necessary, contacting the hacker for assistance with the decryption utility

• Quarantining affected endpoints and data stores to arrest the progress of the assault
• Creating digital copies of every infected server and endpoint and data store in order to perform forensics without interfering with restoration
• Installing anti-virus agents to all virus-free endpoints
• Recovering files from air-gapped restores or uncompromised endpoints
• Building a pristine recovery environment
• Remapping and reconnecting drives to reflect precisely their pre-attack condition

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to exfiltrate information. TAs can then demand an additional payment in exchange for not posting this data on the dark web. Sadly, there exists no method to prove that stolen files have been completely deleted by the threat actor. Actually, in many instances the hacker has limited control about where the information ends up. Settling an exfiltration ransom does not free you from the need for getting the guidance of legal counsel, performing an audit on which data were compromised, and sending the mandated alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises IT services throughout the U.S. for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have been awarded advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP applications. This scope of expertise allows Progent to identify and integrate the surviving parts of your network after a ransomware attack and reconstruct them quickly into an operational network. Progent has collaborated with leading insurance providers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Salt Lake City
To get in touch with Progent about ransomware settlement services in Salt Lake City, phone Progent at 800-462-8800 or go to Contact Progent.