Ransomware Solutions Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Appleton
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated activity that calls for a mix of field experience, IT skills and business acumen. It also requires working closely with the cyber-extortion target's IT staff and the insurance provider, if any. Since the number one priority of the ransomware target is operational continuity, it is critical to establish recovery groups that work effectively, in parallel, and in close communication. Progent has the breadth of IT skills and the depth of experts to supplement your IT support team and restore your network environment rapidly and affordably.

Services provided by Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the attack
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Verifying the hacker's decryption capabilities
• Deciding on an acceptable settlement range with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the threat actor
• Verifying compliance with anti-money laundering (AML) laws
• Managing the crypto-currency payment to the hacker
• Receiving, learning, and using the threat actor's decryptor tool
• If needed, contacting the hacker for technical assistance with the decryption tool

• Isolating infected endpoints and data stores to prevent further spread of the attack
• Making digital copies of every infected device and data store in order to perform forensics without interfering with cleanup
• Adding A/V protection to all clean endpoints
• Recovering files from offline restores or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting datastores to match exactly their pre-encryption condition

Exfiltration Ransoms
In addition to demanding money for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly try to exfiltrate information. TAs can then require a separate settlement in exchange for not publishing this information on the dark web. Unfortunately, there exists no way to be certain that stolen files have been totally erased by the threat actor. In fact, in numerous cases the TA has little control over who can access the stolen files. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, conducting an investigation into which files were stolen, and sending the mandated notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises network services across the United States for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in foundation technologies such as Cisco infrastructure, VMware, and major Linux distros. Progent's data security consultants have earned industry-recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning applications. This broad array of expertise allows Progent to identify and integrate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them quickly into a viable system. Progent has collaborated with top insurance providers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Services in Appleton
To get in touch with Progent about crypto-ransomware settlement negotiation services in Appleton, phone Progent at 800-462-8800 or go to Contact Progent.