Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Aurora
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complicated activity that calls for a combination of field experience, IT skills and business savvy. It also demands close co-operation with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Since the top goal of the ransomware target is operational continuity, it is vital to deploy response teams that work efficiently, concurrently, and with intimate collaboration. Progent has the scope of IT skills and the deep bench of personnel to supplement your network support team and recover your network quickly and affordably.

Services offered by Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Testing the hacker's decryption tool
• Agreeing on a settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement amount and timeline with the threat actor
• Verifying adherence to anti-money laundering regulations
• Carrying out the crypto-currency disbursement to the TA
• Receiving, reviewing, and using the TA's decryptor utility
• If necessary, contacting the hacker for technical help with the decryptor tool

• Isolating affected endpoints to arrest the progress of the attack
• Making digital copies of each infected server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing A/V agents to all clean endpoints
• Salvaging files from offline backups or uncompromised endpoints
• Building a pristine environment
• Mapping and reconnecting drives to match exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond demanding money for a decryption utility, current strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") files. TAs can then demand an additional payment for not divulging this data on the dark web. Sadly, there exists no way to be certain that stolen data have been totally erased by the threat actor. In fact, in numerous instances the threat actor has little say over data custody. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of legal counsel, performing an audit on which files were taken, and sending the necessary notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises network services across the U.S. for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded high-level certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial management and Enterprise Resource Planning software. This breadth of expertise gives Progent the ability to identify and integrate the undamaged parts of your information system after a ransomware intrusion and reconstruct them rapidly into a viable network. Progent has worked with leading insurance providers including Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Aurora
To contact with Progent about crypto-ransomware settlement negotiation expertise in Aurora, call Progent at 800-462-8800 or go to Contact Progent.