Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Aurora
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex activity that requires a mix of field experience, IT knowledge and business acumen. It also requires close co-operation with the victim's IT staff and the insurance provider, if there is one. Because the number one priority of the ransomware victim is operational continuity, it is vital to establish recovery groups that operate effectively, in parallel, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of experts to complement your IT support team and restore your network quickly and affordably.

Services available from Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware involved in the assault
• identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Verifying the TA's decryption capabilities
• Budgeting a settlement payment with the victim and the cyber insurance provider
• Negotiating a settlement amount and schedule with the hacker
• Verifying adherence to anti-money laundering sanctions
• Carrying out the crypto-currency payment to the TA
• Acquiring, learning, and operating the hacker's decryptor tool
• If needed, contacting the TA for technical help with the decryptor tool

• Quarantining affected endpoints to prevent further spread of the assault
• Making digital copies of each compromised server and endpoint and data store in order to perform forensics in parallel with cleanup
• Adding A/V agents to all clean endpoints
• Salvaging files from offline restores or uncompromised machines
• Building a clean environment
• Remapping and reconnecting datastores to reflect exactly their pre-attack condition

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. Hackers can then demand an additional ransom in exchange for not divulging this data or selling it. Unfortunately, there exists no method to prove that exfiltrated data have been totally erased by the hacker. Actually, in numerous cases the hacker has little control over the disposition of the data. Paying an exfiltration ransom does not eliminate the necessity of seeking the guidance of privacy lawyers, conducting an inventory of data were taken, and sending the required notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite network services across the United States for more than 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in core technologies including Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned prestigious certifications including CISA, CISSP-ISSAP, and CRISC. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning applications. This broad array of skills gives Progent the ability to identify and integrate the undamaged pieces of your network after a ransomware attack and rebuild them quickly into a viable system. Progent has worked with top insurance providers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Aurora
To contact with Progent about crypto-ransomware settlement negotiation expertise in Aurora, call Progent at 800-462-8800 or go to Contact Progent.