Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Toledo
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex exercise that requires a combination of real-word experience, technical knowledge and business acumen. It also requires close co-operation with the ransomware victim's IT staff and the insurance carrier, if any. Because the number one goal of the ransomware target is operational continuity, it is critical to establish recovery teams that work effectively, concurrently, and with intimate collaboration. Progent has the scope of IT knowledge and the depth of personnel to complement your network staff and recover your network environment rapidly and economically.

Support available from Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the attack
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Testing the hacker's decryption capabilities
• Determining a settlement payment with the victim and the insurance carrier
• Establishing a settlement amount and schedule with the TA
• Confirming compliance with anti-money laundering (AML) laws
• Carrying out the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the threat actor's decryptor utility
• If needed, contacting the hacker for assistance with the decryption tool

• Isolating affected endpoints and data stores to prevent further spread of the attack
• Creating replicas of each breached server and endpoint and data store to allow forensics without interfering with recovery
• Adding anti-virus protection to all clean endpoints
• Restoring data from offline backups or uncompromised machines
• Creating a pristine environment
• Mapping and reconnecting datastores to reflect exactly their pre-encryption condition

Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern variants of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly try to exfiltrate information. Hackers are then able to demand an extra payment in exchange for not divulging this data or selling it. Unfortunately, there exists no way to guarantee that stolen data have been totally erased by the threat actor. In fact, in many instances the hacker has limited control about the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of seeking the guidance of privacy attorneys, performing an audit on which data were compromised, and sending the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises IT services throughout the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in foundation technologies including Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning applications. This breadth of skills allows Progent to salvage and consolidate the surviving pieces of your information system after a ransomware attack and rebuild them quickly into a functioning system. Progent has worked with top insurance providers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Toledo
To contact with Progent about crypto-ransomware settlement negotiation services in Toledo, phone Progent at 800-462-8800 or go to Contact Progent.