Ransomware Response Services

Progent's Ransomware Negotiation Consulting in Downers Grove
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that requires a combination of field experience, IT knowledge and business savvy. It also calls for working closely with the cyber-extortion target's IT team and the cyber insurance provider, if any. Since the number one priority of the ransomware victim is fast recovery, it is critical to establish response groups that operate effectively, in parallel, and in close communication. Progent has the scope of technical skills and the deep bench of experts to complement your IT staff and recover your network environment rapidly and economically.

Services offered by Progent's ransomware negotiation team include:

• Establishing the type of ransomware involved in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the hacker's decryption capabilities
• Agreeing on a settlement amount with the victim and the cyber insurance provider
• Negotiating a settlement and schedule with the TA
• Confirming accordance with anti-money laundering regulations
• Overseeing the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the threat actor's decryptor utility
• If needed, contacting the TA for assistance with the decryption tool

• Quarantining infected endpoints to arrest the progress of the assault
• Creating digital copies of every compromised device and data store in order to perform forensics without interfering with cleanup
• Installing A/V protection to all virus-free endpoints
• Salvaging files from air-gapped restores or unscathed endpoints
• Creating a pristine environment
• Mapping and reconnecting datastores to reflect precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") information. TAs can then require an extra ransom in exchange for not publishing this information or selling it. Sadly, there is no method to prove that stolen data have been completely deleted by the hacker. In fact, in many cases the hacker has little control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the necessity of seeking the guidance of privacy attorneys, performing an investigation into which files were taken, and sending the mandated alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and onsite network services throughout the United States for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned prestigious certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and ERP applications. This scope of expertise allows Progent to identify and consolidate the undamaged pieces of your network after a ransomware assault and rebuild them quickly into a functioning system. Progent has collaborated with top insurance carriers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Downers Grove
To contact with Progent about ransomware settlement services in Downers Grove, phone Progent at 800-462-8800 or go to Contact Progent.