Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Services in Seattle
Progent has experience negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated activity that requires a combination of real-word experience, technical knowledge and business savvy. It also requires close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Because the top goal of the ransomware target is operational continuity, it is vital to deploy recovery teams that work efficiently, concurrently, and with intimate collaboration. Progent offers the scope of technical skills and the depth of experts to supplement your network support team and recover your network environment rapidly and economically.

Services offered by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Verifying the hacker's decryption tool
• Deciding on an acceptable settlement payment with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying accordance with anti-money laundering sanctions
• Managing the crypto-currency transfer to the hacker
• Acquiring, reviewing, and operating the hacker's decryptor utility
• If necessary, contacting the threat actor for technical help with the decryptor utility

• Isolating affected endpoints and data stores to arrest the progress of the assault
• Making replicas of every compromised server and endpoint and data store in order to perform forensics without interfering with restoration
• Installing anti-virus agents to all clean endpoints
• Recovering files from offline restores or unscathed machines
• Building a pristine environment
• Remapping and connecting datastores to reflect exactly their pre-encryption condition

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate files. TAs can then demand an additional payment in exchange for not publishing this data or selling it. Sadly, there exists no method to be certain that exfiltrated data have been completely deleted by the hacker. In fact, in numerous cases the TA has limited say about data custody. Settling an exfiltration ransom does not free you from the need for getting the guidance of privacy lawyers, performing an investigation into which data were compromised, and sending the required alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite IT services across the U.S. for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have been awarded advanced certifications in foundation technology platforms including Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This broad array of expertise gives Progent the ability to salvage and consolidate the surviving parts of your information system after a ransomware attack and reconstruct them rapidly into a functioning network. Progent has worked with leading cyber insurance providers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Seattle
To get in touch with Progent about ransomware settlement services in Seattle, call Progent at 800-462-8800 or go to Contact Progent.