Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Hartford
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that requires a mix of field experience, technical knowledge and business savvy. It also requires close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Because the top priority of the ransomware target is operational continuity, it is critical to establish response teams that operate effectively, concurrently, and in close communication. Progent offers the scope of IT knowledge and the depth of personnel to supplement your network staff and restore your network quickly and economically.

Support offered by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware used in the assault
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the TA's decryption tool
• Deciding on an acceptable settlement with the ransomware victim and the insurance carrier
• Establishing a settlement amount and timeline with the threat actor
• Checking adherence to anti-money laundering laws
• Managing the crypto-currency payment to the hacker
• Acquiring, reviewing, and using the TA's decryptor tool
• If needed, contacting the TA for technical assistance with the decryption utility

• Quarantining affected endpoints and data stores to prevent further progress of the attack
• Creating digital copies of each breached server and endpoint and data store to allow forensics without interfering with recovery
• Adding A/V protection to all virus-free endpoints
• Restoring files from air-gapped restores or unscathed machines
• Creating a clean environment
• Remapping and reconnecting datastores to match exactly their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to exfiltrate files. Hackers can then demand an additional settlement in exchange for not posting this information on the dark web. Unfortunately, there exists no way to be certain that exfiltrated data have been totally deleted by the threat actor. Actually, in numerous cases the TA has limited say about the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of getting the advice of privacy lawyers, conducting an audit on which data were taken, and carrying out the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite network services across the U.S. for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in foundation technologies such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP application software. This broad array of skills allows Progent to salvage and consolidate the undamaged pieces of your network following a ransomware intrusion and rebuild them quickly into a viable network. Progent has worked with leading insurance providers like Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Hartford
To get in touch with Progent about crypto-ransomware settlement expertise in Hartford, phone Progent at 800-462-8800 or go to Contact Progent.