Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Aurora
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated activity that calls for a mix of field experience, IT knowledge and business savvy. It also demands working closely with the ransomware victim's IT team and the insurance provider, if any. Because the top priority of the ransomware target is operational continuity, it is vital to deploy recovery teams that work efficiently, in parallel, and with intimate collaboration. Progent has the breadth of IT skills and the deep bench of personnel to complement your network support team and restore your network environment quickly and economically.

Support offered by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware used in the attack
• Identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Testing the TA's decryption capabilities
• Deciding on an acceptable settlement range with the victim and the cyber insurance provider
• Establishing a settlement amount and schedule with the TA
• Verifying compliance with anti-money laundering (AML) regulations
• Managing the crypto-currency transfer to the hacker
• Acquiring, reviewing, and operating the TA's decryptor tool
• If needed, contacting the threat actor for technical assistance with the decryptor tool

• Quarantining affected endpoints and data stores to arrest the progress of the attack
• Creating digital copies of every infected device and data store to allow forensics in parallel with recovery
• Adding anti-virus protection to all clean endpoints
• Restoring files from offline backups or uncompromised endpoints
• Building a pristine environment
• Mapping and connecting drives to reflect precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly attempt to exfiltrate information. TAs are then able to require an extra settlement for not posting this information on the dark web. Sadly, there exists no way to guarantee that stolen data have been completely erased by the hacker. In fact, in numerous cases the threat actor has little say about where the information ends up. Settling an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, conducting an inventory of data were compromised, and sending the necessary notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and on-premises IT services across the U.S. for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have been awarded high-level certifications in core technology platforms such as Cisco infrastructure, VMware, and popular Linux distros. Progent's data security consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial management and Enterprise Resource Planning software. This breadth of expertise gives Progent the ability to salvage and consolidate the surviving pieces of your information system following a ransomware attack and reconstruct them rapidly into a viable system. Progent has collaborated with top insurance carriers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Aurora
To get in touch with Progent about ransomware settlement negotiation guidance in Aurora, phone Progent at 800-462-8800 or go to Contact Progent.