Ransomware Solutions Consultants

Progent's Ransomware Negotiation Services in Oxford
Progent has experience negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complicated exercise that calls for a mix of field experience, technical skills and business acumen. It also requires working closely with the cyber-extortion target's IT team and the insurance carrier, if any. Since the top goal of the ransomware target is operational continuity, it is critical to deploy response teams that work effectively, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the depth of personnel to supplement your IT staff and recover your network environment quickly and economically.

Services offered by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Verifying the hacker's decryption tool
• Budgeting a settlement amount with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying accordance with anti-money laundering (AML) laws
• Managing the crypto-currency transfer to the hacker
• Receiving, learning, and using the TA's decryption mechanism
• If needed, contacting the threat actor for technical assistance with the decryption utility

• Quarantining infected endpoints to arrest the progress of the assault
• Making replicas of each compromised device and data store to allow forensics in parallel with cleanup
• Installing anti-virus agents to all clean endpoints
• Recovering files from air-gapped backups or uncompromised endpoints
• Creating a pristine environment
• Remapping and connecting drives to reflect precisely their pre-encryption condition

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") files. TAs are then able to require an additional ransom in exchange for not divulging this data on the dark web. Sadly, there is no method to prove that exfiltrated data have been completely deleted by the hacker. In fact, in many cases the hacker has little control over data custody. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, conducting an audit on which files were stolen, and carrying out the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite IT services across the U.S. for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes professionals who have been awarded high-level certifications in core technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP application software. This breadth of expertise allows Progent to identify and consolidate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them quickly into an operational system. Progent has worked with leading cyber insurance providers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Oxford
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Oxford, call Progent at 800-462-8800 or go to Contact Progent.