Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Alpharetta
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated exercise that requires a mix of real-word experience, IT skills and business savvy. It also calls for working closely with the cyber-extortion target's IT team and the insurance carrier, if any. Since the number one priority of the ransomware target is fast recovery, it is critical to establish recovery groups that operate efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of technical knowledge and the deep bench of personnel to complement your IT staff and restore your network rapidly and economically.

Support provided by Progent's ransomware negotiation team include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Verifying the threat actor's decryption tool
• Agreeing on a settlement amount with the ransomware victim and the insurance carrier
• Negotiating a settlement and schedule with the threat actor
• Confirming adherence to anti-money laundering (AML) regulations
• Carrying out the crypto-currency payment to the TA
• Receiving, learning, and operating the TA's decryptor mechanism
• If needed, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining infected endpoints to prevent further progress of the attack
• Creating replicas of each compromised server and endpoint and data store in order to perform forensics without interfering with recovery
• Adding A/V protection to all virus-free endpoints
• Recovering data from air-gapped restores or uncompromised endpoints
• Creating a pristine environment
• Remapping and reconnecting drives to reflect exactly their pre-attack state

Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, current variants of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") files. Hackers are then able to require an extra ransom in exchange for not divulging this information on the dark web. Sadly, there is no method to be certain that exfiltrated files have been completely erased by the hacker. Actually, in many cases the TA has limited control over the disposition of the data. Paying an exfiltration ransom does not free you from the need for engaging the advice of legal counsel, conducting an investigation into which data were stolen, and performing the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and onsite network services across the U.S. for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technologies including Cisco networking, VMware, and popular distributions of Linux. Progent's data security consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP software. This breadth of expertise gives Progent the ability to salvage and consolidate the surviving pieces of your network after a ransomware attack and rebuild them quickly into a functioning system. Progent has collaborated with leading cyber insurance carriers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Alpharetta
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Alpharetta, call Progent at 800-462-8800 or go to Contact Progent.