Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Fort Wayne
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex activity that calls for a mix of field experience, technical skills and business savvy. It also demands working closely with the ransomware victim's IT team and the cyber insurance provider, if any. Since the number one goal of the ransomware target is operational continuity, it is critical to deploy recovery groups that operate efficiently, concurrently, and with intimate collaboration. Progent has the scope of technical knowledge and the depth of personnel to complement your IT staff and restore your network quickly and affordably.

Services available from Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Verifying the threat actor's decryption tool
• Determining a settlement payment with the ransomware victim and the cyber insurance provider
• Establishing a settlement and timeline with the TA
• Checking adherence to anti-money laundering sanctions
• Carrying out the crypto-currency payment to the TA
• Acquiring, reviewing, and operating the TA's decryption tool
• If needed, contacting the hacker for assistance with the decryptor utility

• Isolating affected endpoints to prevent further progress of the assault
• Making replicas of every breached server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing A/V agents to all virus-free endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Building a pristine recovery environment
• Remapping and connecting datastores to reflect exactly their pre-encryption condition

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to exfiltrate information. TAs are then able to require an additional ransom in exchange for not publishing this data on the dark web. Sadly, there is no method to prove that stolen files have been completely deleted by the TA. In fact, in many cases the hacker has little control about who can access the stolen files. Paying an exfiltration ransom does not eliminate the necessity of engaging the advice of privacy attorneys, conducting an investigation into which files were compromised, and sending the required notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises IT services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have been awarded high-level certifications in core technologies such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications including CISM, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and ERP application software. This breadth of expertise allows Progent to salvage and consolidate the undamaged pieces of your information system following a ransomware attack and rebuild them quickly into a viable network. Progent has collaborated with leading cyber insurance providers including Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Fort Wayne
To contact with Progent about ransomware settlement guidance in Fort Wayne, phone Progent at 800-462-8800 or go to Contact Progent.