Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Alexandria
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an acceptable settlement is a complicated exercise that calls for a combination of real-word experience, technical knowledge and business savvy. It also calls for close co-operation with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the top goal of the ransomware victim is operational continuity, it is critical to deploy recovery groups that operate effectively, in parallel, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of experts to complement your IT support team and recover your network quickly and affordably.

Support provided by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Testing the TA's decryption capabilities
• Budgeting a settlement range with the ransomware victim and the insurance carrier
• Negotiating a settlement amount and schedule with the TA
• Checking accordance with anti-money laundering regulations
• Carrying out the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the threat actor's decryptor mechanism
• If needed, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining infected endpoints to prevent further progress of the assault
• Creating replicas of each breached device and data store to allow forensics in parallel with restoration
• Adding anti-virus protection to all clean endpoints
• Salvaging data from offline backups or unscathed endpoints
• Building a pristine recovery environment
• Mapping and connecting drives to match exactly their pre-attack state

Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate files. Hackers are then able to demand a separate ransom in exchange for not publishing this information on the dark web. Sadly, there exists no method to prove that stolen files have been completely erased by the hacker. In fact, in numerous instances the hacker has limited control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for getting the advice of legal counsel, conducting an audit on which data were taken, and carrying out the mandated alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite IT services throughout the U.S. for over 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in core technologies such as Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP, and CRISC. (See Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning application software. This broad array of skills gives Progent the ability to salvage and integrate the surviving pieces of your IT environment after a ransomware intrusion and rebuild them quickly into an operational system. Progent has worked with top insurance providers like Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Alexandria
To contact with Progent about crypto-ransomware settlement negotiation expertise in Alexandria, call Progent at 800-462-8800 or go to Contact Progent.