Ransomware Response Consultants

Progent's Ransomware Negotiation Services in San Jose
Progent has experience negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated activity that calls for a mix of real-word experience, IT knowledge and business acumen. It also demands close co-operation with the victim's IT staff and the cyber insurance provider, if any. Because the top goal of the ransomware victim is fast recovery, it is critical to deploy response groups that operate effectively, in parallel, and in close communication. Progent has the breadth of IT knowledge and the depth of experts to complement your IT support team and recover your network rapidly and economically.

Services available from Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware involved in the attack
• Making contact with the hacker
• Evaluating the likelihood of recovery
• Validating the TA's decryption capabilities
• Deciding on an acceptable settlement with the victim and the cyber insurance provider
• Establishing a settlement amount and schedule with the hacker
• Verifying accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency payment to the TA
• Receiving, reviewing, and operating the threat actor's decryptor tool
• If needed, contacting the threat actor for assistance with the decryption tool

• Isolating affected endpoints and data stores to prevent further spread of the assault
• Making digital copies of each infected device and data store in order to perform forensics without interfering with recovery
• Adding A/V protection to all virus-free endpoints
• Recovering files from offline backups or unscathed endpoints
• Building a pristine recovery environment
• Mapping and reconnecting drives to match exactly their pre-encryption state

Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") information. TAs are then able to demand an additional ransom for not publishing this information on the dark web. Sadly, there exists no method to be certain that exfiltrated files have been completely deleted by the hacker. In fact, in many cases the threat actor has little control about where the information ends up. Paying an exfiltration ransom does not free you from the necessity of engaging the guidance of legal counsel, performing an investigation into which files were compromised, and carrying out the necessary notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite network services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have earned high-level certifications in core technologies such as Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned prestigious certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP software. This broad array of expertise gives Progent the ability to identify and consolidate the undamaged pieces of your network following a ransomware attack and reconstruct them rapidly into an operational network. Progent has collaborated with top cyber insurance carriers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in San Jose
To contact with Progent about ransomware settlement negotiation services in San Jose, call Progent at 800-462-8800 or go to Contact Progent.