Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Cleveland
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex exercise that calls for a mix of field experience, technical knowledge and business acumen. It also demands working closely with the ransomware victim's IT team and the insurance provider, if there is one. Since the top priority of the ransomware target is fast recovery, it is critical to establish response groups that work effectively, in parallel, and with intimate collaboration. Progent offers the breadth of technical knowledge and the deep bench of experts to complement your network staff and restore your network environment rapidly and economically.

Services offered by Progent's ransomware negotiation experts include:

• Determining the type of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Assessing the recovery risk
• Testing the threat actor's decryption tool
• Budgeting a settlement amount with the victim and the insurance carrier
• Establishing a settlement and schedule with the TA
• Checking accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the TA
• Acquiring, learning, and operating the TA's decryptor mechanism
• If needed, contacting the TA for assistance with the decryptor tool

• Quarantining infected endpoints to prevent further spread of the assault
• Making digital copies of each breached server and endpoint and data store in order to perform forensics in parallel with recovery
• Adding anti-virus agents to all virus-free endpoints
• Recovering data from offline restores or uncompromised machines
• Creating a pristine environment
• Mapping and reconnecting drives to match precisely their pre-attack state

Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Egregor often try to steal (or "exfiltrate") information. TAs can then demand an extra payment in exchange for not divulging this data or selling it. Sadly, there exists no method to guarantee that stolen data have been totally deleted by the threat actor. In fact, in many instances the TA has little control about data custody. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of legal counsel, conducting an audit on which data were compromised, and carrying out the mandated alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite IT services throughout the U.S. for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in core technology platforms such as Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning application software. This broad array of skills gives Progent the ability to salvage and integrate the surviving parts of your network following a ransomware attack and rebuild them rapidly into a viable network. Progent has worked with leading cyber insurance carriers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Cleveland
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Cleveland, phone Progent at 800-462-8800 or go to Contact Progent.