Ransomware Solutions Services

Overview of Progent's Ransomware Negotiation Services in Tucson
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex activity that calls for a combination of field experience, IT skills and business savvy. It also requires working closely with the cyber-extortion target's IT team and the insurance carrier, if there is one. Because the number one priority of the ransomware victim is fast recovery, it is vital to deploy response groups that operate efficiently, in parallel, and in close communication. Progent has the scope of IT knowledge and the deep bench of experts to complement your network staff and recover your network environment quickly and economically.

Support offered by Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the attack
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Determining a settlement amount with the ransomware victim and the cyber insurance provider
• Establishing a settlement amount and timeline with the threat actor
• Confirming compliance with anti-money laundering regulations
• Overseeing the crypto-currency payment to the hacker
• Acquiring, learning, and using the hacker's decryption mechanism
• If needed, contacting the threat actor for technical assistance with the decryption utility

• Quarantining affected endpoints to prevent further spread of the assault
• Making replicas of each infected device and data store to allow forensics without interfering with cleanup
• Installing A/V protection to all virus-free endpoints
• Recovering data from offline restores or unscathed endpoints
• Building a pristine recovery environment
• Remapping and reconnecting drives to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern strains of ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly try to exfiltrate files. TAs are then able to require a separate ransom for not divulging this data on the dark web. Sadly, there exists no method to prove that stolen data have been totally deleted by the threat actor. Actually, in many cases the TA has limited say over data custody. Settling an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy attorneys, conducting an inventory of data were compromised, and carrying out the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises IT services throughout the United States for over 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have earned advanced certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and Enterprise Resource Planning software. This broad array of skills gives Progent the ability to identify and consolidate the surviving parts of your IT environment after a ransomware attack and reconstruct them rapidly into a viable network. Progent has collaborated with top cyber insurance providers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Tucson
To get in touch with Progent about ransomware settlement guidance in Tucson, call Progent at 800-462-8800 or go to Contact Progent.