Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Tampa
Progent has experience negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complex exercise that requires a combination of field experience, IT skills and business savvy. It also demands close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Since the number one goal of the ransomware target is fast recovery, it is critical to deploy recovery teams that work effectively, concurrently, and in close communication. Progent offers the scope of IT skills and the depth of personnel to supplement your IT staff and recover your network quickly and affordably.

Support provided by Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware used in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Testing the hacker's decryption capabilities
• Deciding on an acceptable settlement payment with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the TA
• Confirming compliance with anti-money laundering (AML) laws
• Overseeing the crypto-currency disbursement to the TA
• Receiving, learning, and using the threat actor's decryption mechanism
• If necessary, contacting the threat actor for assistance with the decryptor tool

• Quarantining affected endpoints to arrest the progress of the attack
• Creating digital copies of each breached device and data store to allow forensics in parallel with recovery
• Installing A/V protection to all clean endpoints
• Salvaging data from air-gapped restores or unscathed endpoints
• Creating a clean recovery environment
• Mapping and reconnecting drives to match exactly their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor often try to exfiltrate files. TAs can then demand an extra settlement for not publishing this information or selling it. Unfortunately, there exists no way to be certain that exfiltrated files have been totally erased by the TA. Actually, in many cases the TA has limited say about where the information ends up. Settling an exfiltration ransom does not free you from the need for engaging the guidance of privacy attorneys, conducting an inventory of files were compromised, and performing the necessary alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the United States for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned advanced certifications in core technologies such as Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This breadth of skills allows Progent to salvage and consolidate the surviving pieces of your information system following a ransomware intrusion and rebuild them rapidly into an operational network. Progent has collaborated with top insurance providers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Tampa
To contact with Progent about ransomware settlement negotiation services in Tampa, phone Progent at 800-462-8800 or go to Contact Progent.