Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Nashville
Progent has experience negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complex activity that requires a mix of field experience, technical knowledge and business savvy. It also calls for working closely with the cyber-extortion target's IT team and the cyber insurance provider, if any. Since the top goal of the ransomware target is operational continuity, it is vital to deploy recovery groups that operate effectively, in parallel, and in close communication. Progent has the scope of IT skills and the deep bench of experts to supplement your IT staff and recover your network environment quickly and economically.

Services provided by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Testing the threat actor's decryption capabilities
• Budgeting a settlement range with the victim and the cyber insurance provider
• Negotiating a settlement amount and timeline with the TA
• Confirming compliance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the TA
• Receiving, reviewing, and using the TA's decryption utility
• If necessary, contacting the TA for technical assistance with the decryptor tool

• Quarantining infected endpoints and data stores to arrest the spread of the attack
• Making replicas of every breached server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing anti-virus protection to all clean endpoints
• Salvaging files from offline backups or uncompromised machines
• Building a pristine environment
• Mapping and reconnecting drives to match exactly their pre-attack condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to exfiltrate information. TAs can then require an additional ransom in exchange for not divulging this information or selling it. Sadly, there exists no way to be certain that stolen files have been totally erased by the threat actor. Actually, in many cases the threat actor has limited say over the disposition of the data. Settling an exfiltration ransom does not eliminate the need for seeking the advice of legal counsel, performing an audit on which files were taken, and carrying out the required notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned advanced certifications in foundation technology platforms including Cisco infrastructure, VMware, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP application software. This scope of expertise gives Progent the ability to salvage and integrate the surviving pieces of your network following a ransomware intrusion and rebuild them rapidly into a viable network. Progent has collaborated with leading insurance carriers including Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Nashville
To contact with Progent about ransomware settlement expertise in Nashville, call Progent at 800-462-8800 or go to Contact Progent.