Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Southfield
Progent has experience negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complicated activity that requires a mix of real-word experience, technical skills and business savvy. It also demands working closely with the cyber-extortion target's IT staff and the insurance carrier, if any. Because the number one goal of the ransomware target is operational continuity, it is vital to establish response groups that operate effectively, concurrently, and in close communication. Progent offers the breadth of technical skills and the depth of personnel to supplement your IT support team and restore your network environment quickly and affordably.

Services offered by Progent's ransomware negotiation experts include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Validating the TA's decryption tool
• Deciding on an acceptable settlement range with the ransomware victim and the insurance carrier
• Establishing a settlement amount and schedule with the TA
• Verifying accordance with anti-money laundering regulations
• Overseeing the crypto-currency payment to the TA
• Receiving, reviewing, and using the threat actor's decryption tool
• If needed, contacting the TA for assistance with the decryption utility

• Isolating infected endpoints to prevent further progress of the attack
• Making replicas of each breached device and data store to allow forensics without interfering with cleanup
• Installing anti-virus agents to all clean endpoints
• Salvaging files from offline backups or uncompromised endpoints
• Creating a pristine recovery environment
• Remapping and connecting datastores to match precisely their pre-encryption state

Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") files. Hackers can then demand an additional settlement in exchange for not publishing this data on the dark web. Sadly, there exists no method to be certain that exfiltrated files have been completely erased by the threat actor. Actually, in many cases the TA has little control about where the information ends up. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy attorneys, conducting an inventory of data were compromised, and carrying out the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and onsite network services across the U.S. for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have earned high-level certifications in foundation technologies including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned industry-recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP applications. This breadth of skills allows Progent to salvage and consolidate the surviving parts of your IT environment after a ransomware attack and rebuild them rapidly into an operational system. Progent has collaborated with leading insurance providers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Southfield
To get in touch with Progent about crypto-ransomware settlement negotiation services in Southfield, call Progent at 800-462-8800 or go to Contact Progent.