Ransomware Solutions Consultants

Progent's Ransomware Negotiation Services in Montgomery
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex exercise that requires a combination of field experience, technical skills and business acumen. It also requires close co-operation with the ransomware victim's IT team and the cyber insurance carrier, if any. Since the top priority of the ransomware victim is operational continuity, it is vital to establish recovery groups that operate efficiently, in parallel, and with intimate collaboration. Progent has the scope of IT skills and the deep bench of experts to supplement your IT support team and restore your network environment quickly and economically.

Services provided by Progent's ransomware settlement team include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Validating the threat actor's decryption tool
• Deciding on an acceptable settlement payment with the victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the threat actor
• Confirming accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the hacker
• Receiving, reviewing, and using the TA's decryptor mechanism
• If necessary, contacting the threat actor for assistance with the decryptor utility

• Quarantining affected endpoints to arrest the spread of the attack
• Making replicas of every breached server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing anti-virus agents to all clean endpoints
• Salvaging files from offline restores or uncompromised machines
• Creating a pristine environment
• Remapping and reconnecting datastores to match precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption tool, current strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate information. TAs are then able to demand an additional payment for not divulging this data on the dark web. Unfortunately, there is no way to be certain that exfiltrated files have been completely deleted by the threat actor. In fact, in numerous cases the hacker has limited say over data custody. Paying an exfiltration ransom does not free you from the necessity of seeking the advice of legal counsel, conducting an inventory of files were taken, and performing the required notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and on-premises IT services throughout the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have earned advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP application software. This breadth of skills gives Progent the ability to identify and consolidate the undamaged parts of your information system after a ransomware assault and rebuild them quickly into a viable system. Progent has worked with leading cyber insurance providers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Montgomery
To contact with Progent about ransomware settlement negotiation guidance in Montgomery, call Progent at 800-462-8800 or go to Contact Progent.