Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Consulting in Aurora
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex activity that calls for a combination of real-word experience, technical skills and business acumen. It also demands working closely with the ransomware victim's IT staff and the cyber insurance provider, if there is one. Because the number one goal of the ransomware target is fast recovery, it is vital to establish recovery teams that operate effectively, concurrently, and in close communication. Progent offers the breadth of technical skills and the depth of experts to complement your IT staff and restore your network environment quickly and economically.

Support available from Progent's ransomware settlement team include:

• Determining the type of ransomware used in the assault
• making contact with the hacker persona
• Assessing the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Agreeing on a settlement range with the victim and the insurance carrier
• Negotiating a settlement and schedule with the threat actor
• Checking accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the TA
• Acquiring, reviewing, and operating the TA's decryptor tool
• If needed, contacting the threat actor for technical help with the decryption utility

• Quarantining infected endpoints and data stores to arrest the progress of the attack
• Creating digital copies of each breached device and data store to allow forensics without interfering with restoration
• Adding A/V agents to all clean endpoints
• Restoring data from air-gapped backups or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting drives to match precisely their pre-attack condition

Settling Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly try to steal (or "exfiltrate") information. Hackers are then able to demand a separate ransom in exchange for not publishing this data or selling it. Sadly, there exists no method to be certain that stolen files have been completely deleted by the threat actor. Actually, in numerous instances the hacker has little control about the disposition of the data. Paying an exfiltration ransom does not free you from the need for seeking the guidance of privacy lawyers, conducting an investigation into which data were compromised, and sending the mandated notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and on-premises network services across the U.S. for over two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded high-level certifications in core technology platforms such as Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP-ISSAP, and CRISC. (Refer to Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning application software. This scope of expertise gives Progent the ability to salvage and integrate the undamaged pieces of your IT environment following a ransomware assault and reconstruct them quickly into a viable system. Progent has collaborated with top cyber insurance carriers like Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Aurora
To contact with Progent about ransomware settlement negotiation guidance in Aurora, call Progent at 800-462-8800 or go to Contact Progent.