Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Aurora
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex exercise that requires a mix of real-word experience, IT skills and business acumen. It also requires close co-operation with the victim's IT staff and the cyber insurance provider, if any. Because the top priority of the ransomware victim is fast recovery, it is critical to deploy response teams that operate effectively, in parallel, and in close communication. Progent offers the scope of technical knowledge and the deep bench of personnel to complement your network support team and recover your network quickly and affordably.

Services provided by Progent's ransomware settlement experts include:

• Determining the kind of ransomware used in the attack
• making contact with the hacker
• Assessing the recovery risk
• Validating the hacker's decryption tool
• Budgeting a settlement payment with the victim and the cyber insurance carrier
• Negotiating a settlement and schedule with the TA
• Confirming adherence to anti-money laundering sanctions
• Managing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the threat actor's decryption mechanism
• If needed, contacting the threat actor for technical assistance with the decryptor tool

• Isolating infected endpoints and data stores to prevent further progress of the assault
• Creating digital copies of every compromised server and endpoint and data store to allow forensics without interfering with cleanup
• Installing A/V agents to all virus-free endpoints
• Restoring data from air-gapped restores or uncompromised machines
• Creating a clean recovery environment
• Mapping and connecting datastores to match precisely their pre-attack state

Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current strains of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. TAs can then demand an additional settlement in exchange for not publishing this information or selling it. Unfortunately, there exists no method to prove that stolen data have been totally deleted by the threat actor. Actually, in many instances the threat actor has limited control about data custody. Settling an exfiltration ransom does not eliminate the need for seeking the guidance of legal counsel, performing an inventory of files were taken, and carrying out the mandated notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and on-premises network services throughout the U.S. for over two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have earned high-level certifications in core technologies including Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications including CISM, CISSP, and CRISC. (See certifications earned by Progent consultants). Progent also has guidance in financial and Enterprise Resource Planning software. This broad array of skills gives Progent the ability to identify and integrate the undamaged pieces of your information system after a ransomware intrusion and reconstruct them rapidly into a viable system. Progent has collaborated with top insurance carriers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Aurora
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Aurora, phone Progent at 800-462-8800 or go to Contact Progent.