Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Minneapolis
Progent has experience negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complex exercise that requires a combination of field experience, IT knowledge and business savvy. It also calls for working closely with the ransomware victim's IT team and the cyber insurance carrier, if any. Since the number one goal of the ransomware victim is operational continuity, it is critical to establish response groups that work efficiently, concurrently, and in close communication. Progent offers the scope of technical skills and the depth of experts to supplement your network staff and recover your network environment rapidly and affordably.

Support available from Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Testing the threat actor's decryption tool
• Budgeting a settlement amount with the victim and the insurance provider
• Establishing a settlement amount and timeline with the threat actor
• Checking accordance with anti-money laundering laws
• Overseeing the crypto-currency disbursement to the hacker
• Receiving, reviewing, and operating the hacker's decryptor mechanism
• If needed, contacting the threat actor for technical help with the decryption tool

• Isolating affected endpoints to arrest the spread of the assault
• Making digital copies of every compromised device and data store to allow forensics without interfering with cleanup
• Installing A/V agents to all virus-free endpoints
• Recovering files from offline backups or unscathed endpoints
• Creating a pristine recovery environment
• Mapping and connecting drives to reflect exactly their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often try to exfiltrate files. Hackers can then demand an additional payment for not divulging this information on the dark web. Sadly, there is no method to be certain that stolen data have been completely deleted by the threat actor. Actually, in numerous cases the hacker has little say over where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of legal counsel, conducting an investigation into which files were compromised, and sending the mandated notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and onsite network services across the United States for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have earned advanced certifications in foundation technology platforms including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial management and Enterprise Resource Planning software. This breadth of expertise gives Progent the ability to salvage and consolidate the surviving parts of your IT environment after a ransomware assault and rebuild them quickly into an operational network. Progent has worked with leading cyber insurance carriers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Minneapolis
To get in touch with Progent about ransomware settlement guidance in Minneapolis, call Progent at 800-462-8800 or go to Contact Progent.