Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Appleton
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complicated activity that calls for a combination of real-word experience, IT knowledge and business acumen. It also requires working closely with the ransomware victim's IT staff and the insurance carrier, if any. Since the number one goal of the ransomware target is operational continuity, it is critical to establish recovery teams that operate effectively, in parallel, and in close communication. Progent offers the breadth of IT skills and the deep bench of personnel to complement your network support team and restore your network rapidly and affordably.

Services available from Progent's ransomware settlement team include:

• Establishing the kind of ransomware used in the attack
• making contact with the hacker
• Assessing the likelihood of recovery
• Testing the threat actor's decryption tool
• Determining a settlement amount with the victim and the cyber insurance provider
• Establishing a settlement amount and timeline with the hacker
• Verifying accordance with anti-money laundering sanctions
• Overseeing the crypto-currency transfer to the hacker
• Receiving, learning, and operating the threat actor's decryption tool
• If needed, contacting the threat actor for technical assistance with the decryptor tool

• Isolating affected endpoints and data stores to arrest the spread of the attack
• Making digital copies of every infected device and data store in order to perform forensics in parallel with recovery
• Installing anti-virus agents to all virus-free endpoints
• Salvaging files from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Mapping and connecting drives to match precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") files. Hackers are then able to require an additional payment in exchange for not divulging this information on the dark web. Sadly, there exists no way to be certain that exfiltrated data have been totally erased by the TA. Actually, in numerous cases the threat actor has limited say over data custody. Settling an exfiltration ransom does not free you from the necessity of getting the guidance of privacy lawyers, conducting an audit on which data were compromised, and carrying out the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services throughout the U.S. for over two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technology platforms including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned prestigious certifications including CISM, CISSP-ISSAP, and GIAC. (See Progent's certifications). Progent also offers top-tier support in financial management and ERP applications. This scope of skills gives Progent the ability to identify and consolidate the undamaged parts of your network following a ransomware assault and reconstruct them rapidly into a functioning network. Progent has worked with top insurance carriers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Appleton
To contact with Progent about crypto-ransomware settlement negotiation expertise in Appleton, call Progent at 800-462-8800 or go to Contact Progent.