Ransomware Solutions Consultants

Progent's Ransomware Negotiation Services in Aurora
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex exercise that requires a mix of field experience, IT skills and business savvy. It also demands working closely with the victim's IT staff and the cyber insurance provider, if there is one. Since the number one priority of the ransomware victim is operational continuity, it is vital to establish recovery groups that work effectively, concurrently, and in close communication. Progent has the scope of IT skills and the deep bench of experts to complement your network support team and restore your network rapidly and economically.

Services offered by Progent's ransomware settlement team include:

• Establishing the type of ransomware involved in the attack
• making contact with the hacker persona
• Assessing the recovery risk
• Testing the TA's decryption tool
• Deciding on an acceptable settlement range with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and schedule with the TA
• Checking adherence to anti-money laundering (AML) laws
• Managing the crypto-currency disbursement to the hacker
• Receiving, reviewing, and using the threat actor's decryption mechanism
• If needed, contacting the TA for technical assistance with the decryptor tool

• Isolating affected endpoints to prevent further progress of the assault
• Creating replicas of each breached server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding A/V protection to all virus-free endpoints
• Recovering files from air-gapped restores or unscathed endpoints
• Creating a clean recovery environment
• Mapping and connecting drives to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, current strains of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly try to exfiltrate files. TAs are then able to demand an extra payment in exchange for not posting this information or selling it. Sadly, there exists no method to be certain that stolen data have been completely erased by the hacker. In fact, in many cases the TA has little say about where the information ends up. Settling an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, conducting an inventory of data were compromised, and carrying out the necessary alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises network services throughout the United States for more than 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned advanced certifications in core technology platforms such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, and CRISC. (See certifications earned by Progent consultants). Progent also has guidance in financial and ERP software. This breadth of expertise gives Progent the ability to salvage and integrate the surviving parts of your IT environment following a ransomware assault and rebuild them rapidly into a functioning network. Progent has collaborated with leading insurance carriers including Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Aurora
To get in touch with Progent about crypto-ransomware settlement expertise in Aurora, phone Progent at 800-462-8800 or go to Contact Progent.