Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Birmingham
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that requires a combination of real-word experience, technical knowledge and business acumen. It also calls for close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if any. Since the top goal of the ransomware target is operational continuity, it is critical to deploy recovery groups that work efficiently, in parallel, and in close communication. Progent has the breadth of technical skills and the deep bench of experts to supplement your network staff and restore your network environment rapidly and affordably.

Services provided by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware involved in the attack
• identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Validating the hacker's decryption tool
• Budgeting a settlement with the victim and the cyber insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Verifying accordance with anti-money laundering sanctions
• Managing the crypto-currency payment to the TA
• Receiving, reviewing, and using the threat actor's decryptor tool
• If necessary, contacting the threat actor for technical assistance with the decryption tool

• Isolating affected endpoints and data stores to arrest the spread of the attack
• Making replicas of each compromised server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing anti-virus agents to all virus-free endpoints
• Salvaging data from offline backups or unscathed endpoints
• Building a pristine environment
• Mapping and connecting datastores to reflect precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") information. Hackers can then require an additional payment in exchange for not posting this information or selling it. Sadly, there exists no way to prove that exfiltrated data have been totally erased by the TA. In fact, in numerous instances the TA has little say over the disposition of the data. Paying an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, conducting an investigation into which data were taken, and sending the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services throughout the United States for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned high-level certifications in foundation technology platforms including Cisco networking, VMware, and popular distributions of Linux. Progent's data security consultants have earned prestigious certifications such as CISM, CISSP, and CRISC. (Refer to Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning application software. This breadth of skills allows Progent to identify and integrate the undamaged pieces of your network after a ransomware assault and rebuild them quickly into a viable network. Progent has worked with top cyber insurance carriers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Birmingham
To contact with Progent about ransomware settlement negotiation expertise in Birmingham, phone Progent at 800-462-8800 or go to Contact Progent.