Ransomware Solutions Consulting Services

Progent's Ransomware Negotiation Consulting in Brighton
Progent has experience negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complex exercise that calls for a mix of real-word experience, IT skills and business savvy. It also requires close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Because the top goal of the ransomware target is fast recovery, it is critical to deploy response teams that operate efficiently, in parallel, and with intimate collaboration. Progent has the scope of IT skills and the depth of personnel to supplement your network support team and restore your network environment quickly and economically.

Services offered by Progent's ransomware settlement team include:

• Determining the type of ransomware used in the attack
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Validating the TA's decryption capabilities
• Deciding on an acceptable settlement amount with the ransomware victim and the cyber insurance provider
• Establishing a settlement and schedule with the hacker
• Confirming adherence to anti-money laundering regulations
• Overseeing the crypto-currency transfer to the hacker
• Acquiring, learning, and operating the TA's decryption tool
• If necessary, contacting the threat actor for assistance with the decryptor utility

• Isolating affected endpoints to arrest the progress of the attack
• Making digital copies of every compromised device and data store to allow forensics without interfering with recovery
• Adding A/V agents to all clean endpoints
• Recovering data from air-gapped backups or uncompromised machines
• Creating a pristine environment
• Mapping and reconnecting drives to match exactly their pre-encryption condition

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern variants of crypto-ransomware like Ryuk, Maze, Netwalker, and Egregor often try to exfiltrate files. Hackers are then able to require an extra payment in exchange for not divulging this information or selling it. Sadly, there is no way to prove that exfiltrated data have been completely erased by the TA. In fact, in many instances the TA has limited say about the disposition of the data. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of privacy attorneys, conducting an inventory of data were compromised, and sending the mandated notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises IT services throughout the U.S. for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technologies including Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and ERP applications. This breadth of skills gives Progent the ability to identify and consolidate the surviving pieces of your IT environment after a ransomware assault and reconstruct them rapidly into a functioning system. Progent has worked with top insurance providers like Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Brighton
To contact with Progent about ransomware settlement negotiation expertise in Brighton, phone Progent at 800-462-8800 or go to Contact Progent.