Ransomware Response Consulting Services

Progent's Ransomware Negotiation Consulting in Birmingham
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex exercise that calls for a combination of field experience, IT skills and business acumen. It also requires close co-operation with the cyber-extortion target's IT staff and the cyber insurance carrier, if any. Because the top priority of the ransomware target is operational continuity, it is vital to establish recovery groups that work efficiently, concurrently, and with intimate collaboration. Progent offers the scope of technical skills and the depth of experts to supplement your IT support team and recover your network environment quickly and affordably.

Support provided by Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the attack
• identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Verifying the threat actor's decryption capabilities
• Determining a settlement with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the hacker
• Verifying adherence to anti-money laundering laws
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the threat actor's decryptor mechanism
• If needed, contacting the TA for assistance with the decryptor tool

• Quarantining affected endpoints and data stores to prevent further progress of the assault
• Creating digital copies of every compromised device and data store in order to perform forensics in parallel with cleanup
• Installing A/V protection to all clean endpoints
• Salvaging files from air-gapped restores or uncompromised endpoints
• Building a pristine recovery environment
• Remapping and reconnecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current variants of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor often try to exfiltrate information. Hackers can then demand a separate payment in exchange for not publishing this information or selling it. Sadly, there exists no way to prove that stolen files have been totally deleted by the hacker. In fact, in many cases the hacker has limited control about data custody. Settling an exfiltration ransom does not eliminate the need for seeking the advice of legal counsel, performing an audit on which files were compromised, and carrying out the required alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite network services across the U.S. for more than 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded high-level certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned industry-recognized certifications including CISM, CISSP, and CRISC. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP applications. This breadth of skills allows Progent to salvage and integrate the surviving parts of your information system after a ransomware intrusion and reconstruct them quickly into an operational network. Progent has collaborated with top insurance carriers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Birmingham
To get in touch with Progent about ransomware settlement negotiation guidance in Birmingham, phone Progent at 800-462-8800 or go to Contact Progent.