Ransomware Solutions Services

Overview of Progent's Ransomware Negotiation Services in Schaumburg
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated activity that calls for a combination of field experience, IT knowledge and business acumen. It also requires working closely with the cyber-extortion target's IT team and the cyber insurance carrier, if any. Since the number one priority of the ransomware target is fast recovery, it is critical to establish response groups that operate efficiently, concurrently, and in close communication. Progent has the breadth of technical knowledge and the depth of personnel to complement your network support team and recover your network environment rapidly and economically.

Support offered by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Verifying the threat actor's decryption tool
• Determining a settlement with the ransomware victim and the insurance provider
• Negotiating a settlement and schedule with the threat actor
• Confirming adherence to anti-money laundering laws
• Overseeing the crypto-currency payment to the TA
• Acquiring, learning, and operating the threat actor's decryptor tool
• If needed, contacting the hacker for technical assistance with the decryption utility

• Quarantining affected endpoints to arrest the spread of the assault
• Creating replicas of every breached server and endpoint and data store to allow forensics in parallel with recovery
• Installing A/V protection to all virus-free endpoints
• Restoring files from air-gapped backups or uncompromised machines
• Creating a clean recovery environment
• Remapping and connecting drives to match precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly attempt to steal (or "exfiltrate") files. TAs can then require a separate payment in exchange for not publishing this data or selling it. Sadly, there exists no method to guarantee that exfiltrated data have been completely erased by the TA. In fact, in numerous cases the TA has limited say about who can access the stolen files. Paying an exfiltration ransom does not eliminate the necessity of engaging the advice of privacy lawyers, conducting an audit on which data were compromised, and sending the required notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite network services throughout the United States for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technologies such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP applications. This breadth of expertise gives Progent the ability to identify and consolidate the undamaged parts of your network following a ransomware attack and reconstruct them quickly into an operational network. Progent has worked with top cyber insurance carriers including Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Schaumburg
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Schaumburg, phone Progent at 800-462-8800 or go to Contact Progent.