Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Memphis
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated exercise that requires a mix of field experience, technical knowledge and business savvy. It also demands close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Since the top priority of the ransomware victim is operational continuity, it is critical to deploy response teams that work efficiently, concurrently, and in close communication. Progent offers the scope of technical skills and the depth of experts to supplement your network support team and recover your network quickly and economically.

Services provided by Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Verifying the TA's decryption capabilities
• Determining a settlement payment with the victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the hacker
• Confirming compliance with anti-money laundering sanctions
• Overseeing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the threat actor's decryptor tool
• If needed, contacting the hacker for technical assistance with the decryptor utility

• Isolating affected endpoints to prevent further spread of the attack
• Making digital copies of each infected device and data store in order to perform forensics in parallel with cleanup
• Adding A/V protection to all clean endpoints
• Restoring files from air-gapped backups or unscathed machines
• Building a pristine recovery environment
• Mapping and connecting drives to reflect precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption utility, current strains of ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") information. TAs are then able to require an extra settlement in exchange for not divulging this information or selling it. Unfortunately, there exists no method to be certain that stolen data have been completely deleted by the threat actor. In fact, in numerous cases the threat actor has limited control over where the information ends up. Settling an exfiltration ransom does not free you from the need for getting the guidance of privacy lawyers, performing an audit on which data were taken, and performing the mandated alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in foundation technologies such as Cisco networking, VMware, and popular Linux distros. Progent's data security consultants have earned prestigious certifications including CISA, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial management and ERP application software. This scope of expertise allows Progent to identify and integrate the surviving parts of your information system following a ransomware attack and reconstruct them rapidly into a viable network. Progent has collaborated with leading cyber insurance providers including Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Memphis
To contact with Progent about ransomware settlement negotiation expertise in Memphis, phone Progent at 800-462-8800 or go to Contact Progent.