Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Appleton
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an acceptable settlement is a complex exercise that calls for a combination of real-word experience, IT skills and business acumen. It also calls for close co-operation with the cyber-extortion target's IT staff and the cyber insurance carrier, if there is one. Because the top goal of the ransomware target is operational continuity, it is vital to establish response teams that operate efficiently, in parallel, and in close communication. Progent has the breadth of IT knowledge and the deep bench of personnel to supplement your IT staff and recover your network rapidly and affordably.

Support offered by Progent's ransomware settlement team include:

• Determining the type of ransomware involved in the assault
• making contact with the hacker
• Evaluating the likelihood of recovery
• Testing the hacker's decryption capabilities
• Determining a settlement payment with the victim and the insurance carrier
• Establishing a settlement and schedule with the hacker
• Confirming accordance with anti-money laundering regulations
• Managing the crypto-currency payment to the hacker
• Receiving, reviewing, and using the TA's decryptor mechanism
• If necessary, contacting the TA for technical help with the decryption tool

• Isolating infected endpoints and data stores to arrest the spread of the assault
• Creating replicas of each breached device and data store to allow forensics in parallel with restoration
• Adding A/V protection to all clean endpoints
• Salvaging files from air-gapped restores or uncompromised machines
• Creating a pristine recovery environment
• Remapping and connecting drives to match exactly their pre-encryption state

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current variants of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often try to steal (or "exfiltrate") information. TAs are then able to demand an extra ransom for not publishing this information or selling it. Unfortunately, there is no way to prove that exfiltrated data have been totally deleted by the hacker. In fact, in numerous cases the hacker has limited control over the disposition of the data. Settling an exfiltration ransom does not free you from the need for seeking the advice of privacy lawyers, conducting an inventory of files were taken, and carrying out the mandated notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises IT services throughout the United States for more than 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have earned high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISM, CISSP, and CRISC. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP application software. This broad array of expertise gives Progent the ability to salvage and consolidate the surviving parts of your IT environment following a ransomware attack and reconstruct them quickly into a viable system. Progent has collaborated with leading insurance providers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Appleton
To contact with Progent about crypto-ransomware settlement negotiation expertise in Appleton, call Progent at 800-462-8800 or go to Contact Progent.