Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Consulting in Grand Rapids
Progent has experience negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complicated activity that calls for a mix of field experience, IT skills and business savvy. It also demands working closely with the victim's IT staff and the cyber insurance carrier, if there is one. Because the top goal of the ransomware target is fast recovery, it is vital to deploy response groups that work effectively, concurrently, and with intimate collaboration. Progent offers the scope of technical skills and the depth of experts to complement your IT support team and recover your network environment rapidly and affordably.

Support provided by Progent's ransomware settlement negotiation experts include:

• Establishing the kind of ransomware involved in the assault
• Making contact with the hacker
• Evaluating the recovery risk
• Verifying the TA's decryption capabilities
• Determining a settlement range with the victim and the insurance provider
• Establishing a settlement amount and timeline with the hacker
• Confirming compliance with anti-money laundering sanctions
• Carrying out the crypto-currency transfer to the TA
• Acquiring, learning, and operating the hacker's decryptor mechanism
• If needed, contacting the threat actor for technical help with the decryption tool

• Isolating infected endpoints and data stores to prevent further progress of the assault
• Creating replicas of every compromised device and data store in order to perform forensics in parallel with recovery
• Adding A/V agents to all virus-free endpoints
• Salvaging files from offline backups or uncompromised machines
• Building a pristine environment
• Remapping and reconnecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern variants of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor often try to steal (or "exfiltrate") files. Hackers can then require an extra payment for not posting this data on the dark web. Sadly, there is no method to be certain that stolen files have been totally deleted by the hacker. In fact, in many instances the TA has limited say over where the information ends up. Settling an exfiltration ransom does not eliminate the need for engaging the advice of legal counsel, conducting an inventory of data were taken, and sending the necessary alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite IT services throughout the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP application software. This breadth of skills gives Progent the ability to identify and consolidate the surviving pieces of your network following a ransomware attack and rebuild them rapidly into an operational network. Progent has collaborated with leading cyber insurance carriers including Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Grand Rapids
To contact with Progent about ransomware settlement services in Grand Rapids, call Progent at 800-462-8800 or go to Contact Progent.