Ransomware Response Consulting Services

Progent's Ransomware Negotiation Services in Skokie
Progent has experience negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complex activity that calls for a mix of real-word experience, IT skills and business acumen. It also demands working closely with the victim's IT team and the insurance provider, if any. Because the top priority of the ransomware target is fast recovery, it is vital to deploy recovery groups that operate effectively, in parallel, and with intimate collaboration. Progent offers the scope of technical skills and the deep bench of personnel to complement your network support team and restore your network environment quickly and economically.

Support offered by Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Verifying the threat actor's decryption capabilities
• Agreeing on a settlement payment with the victim and the insurance carrier
• Establishing a settlement and schedule with the hacker
• Checking compliance with anti-money laundering (AML) sanctions
• Overseeing the crypto-currency payment to the hacker
• Acquiring, reviewing, and using the TA's decryptor mechanism
• If necessary, contacting the threat actor for technical assistance with the decryption tool

• Quarantining affected endpoints to prevent further progress of the attack
• Creating digital copies of every infected server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding anti-virus protection to all clean endpoints
• Salvaging data from air-gapped restores or unscathed endpoints
• Building a clean environment
• Mapping and reconnecting datastores to match precisely their pre-encryption state

Settling Exfiltration Ransoms
Beyond extorting money for a decryption tool, current strains of ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to exfiltrate information. Hackers can then require an additional settlement for not publishing this data on the dark web. Unfortunately, there exists no way to be certain that exfiltrated data have been completely erased by the TA. Actually, in numerous instances the threat actor has limited say over the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of seeking the guidance of privacy lawyers, conducting an investigation into which data were stolen, and carrying out the mandated alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises IT services across the United States for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have been awarded high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP software. This broad array of expertise gives Progent the ability to identify and integrate the undamaged pieces of your information system after a ransomware attack and reconstruct them quickly into a functioning system. Progent has collaborated with leading cyber insurance carriers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Skokie
To contact with Progent about crypto-ransomware settlement guidance in Skokie, call Progent at 800-462-8800 or go to Contact Progent.