Ransomware Solutions Consultants

Progent's Ransomware Settlement Negotiation Consulting in San Diego
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex exercise that calls for a mix of real-word experience, IT knowledge and business acumen. It also demands working closely with the ransomware victim's IT team and the insurance carrier, if there is one. Since the number one priority of the ransomware target is operational continuity, it is critical to establish response groups that work efficiently, concurrently, and with intimate collaboration. Progent offers the scope of technical skills and the deep bench of experts to supplement your IT staff and restore your network quickly and economically.

Support offered by Progent's ransomware settlement team include:

• Establishing the type of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Testing the hacker's decryption capabilities
• Determining a settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement amount and timeline with the threat actor
• Verifying adherence to anti-money laundering (AML) laws
• Overseeing the crypto-currency payment to the TA
• Receiving, reviewing, and operating the hacker's decryptor utility
• If needed, contacting the hacker for technical assistance with the decryptor tool

• Quarantining affected endpoints and data stores to arrest the progress of the assault
• Creating digital copies of every compromised device and data store in order to perform forensics without interfering with restoration
• Adding A/V agents to all clean endpoints
• Salvaging files from air-gapped restores or unscathed endpoints
• Creating a clean recovery environment
• Remapping and connecting datastores to reflect precisely their pre-encryption condition

Settling Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to exfiltrate files. TAs can then demand an additional ransom for not publishing this information or selling it. Unfortunately, there exists no way to be certain that exfiltrated data have been completely erased by the TA. In fact, in many instances the threat actor has limited control about the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of getting the advice of legal counsel, conducting an audit on which data were compromised, and sending the required notifications to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and onsite IT services across the U.S. for more than two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have been awarded advanced certifications in core technologies including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and ERP software. This broad array of expertise gives Progent the ability to identify and consolidate the surviving parts of your IT environment after a ransomware intrusion and reconstruct them quickly into a viable network. Progent has collaborated with top insurance carriers like Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in San Diego
To get in touch with Progent about ransomware settlement expertise in San Diego, phone Progent at 800-462-8800 or go to Contact Progent.