Ransomware Response Consultants

Progent's Ransomware Negotiation Consulting in Birmingham
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complex exercise that calls for a combination of real-word experience, technical knowledge and business savvy. It also requires working closely with the ransomware victim's IT staff and the insurance carrier, if any. Because the top priority of the ransomware victim is operational continuity, it is vital to establish response teams that operate efficiently, in parallel, and with intimate collaboration. Progent offers the scope of IT skills and the depth of experts to supplement your network support team and restore your network environment rapidly and affordably.

Support available from Progent's ransomware negotiation experts include:

• Determining the type of ransomware used in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Validating the threat actor's decryption capabilities
• Budgeting a settlement range with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and schedule with the TA
• Confirming accordance with anti-money laundering (AML) laws
• Overseeing the crypto-currency payment to the hacker
• Acquiring, learning, and using the TA's decryptor utility
• If needed, contacting the TA for technical assistance with the decryptor tool

• Isolating infected endpoints and data stores to prevent further progress of the assault
• Making digital copies of each breached server and endpoint and data store to allow forensics in parallel with restoration
• Installing anti-virus protection to all clean endpoints
• Salvaging data from air-gapped backups or unscathed machines
• Building a pristine environment
• Remapping and connecting datastores to match precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to demanding payment for a decryption utility, modern variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to exfiltrate files. TAs are then able to require a separate settlement for not publishing this data or selling it. Sadly, there exists no method to prove that stolen files have been totally erased by the TA. Actually, in numerous instances the hacker has little say about where the information ends up. Paying an exfiltration ransom does not free you from the necessity of getting the advice of legal counsel, performing an investigation into which files were stolen, and performing the required alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises network services across the United States for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned advanced certifications in foundation technologies including Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP applications. This scope of skills allows Progent to salvage and consolidate the surviving pieces of your information system following a ransomware attack and reconstruct them quickly into an operational system. Progent has worked with top cyber insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Birmingham
To get in touch with Progent about ransomware settlement negotiation services in Birmingham, call Progent at 800-462-8800 or go to Contact Progent.