Ransomware Solutions Services

Progent's Ransomware Settlement Negotiation Consulting in Birmingham
Progent has experience negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex exercise that requires a mix of real-word experience, technical skills and business savvy. It also calls for working closely with the ransomware victim's IT staff and the cyber insurance provider, if there is one. Since the top priority of the ransomware victim is fast recovery, it is vital to deploy response groups that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of IT skills and the depth of experts to supplement your IT staff and recover your network rapidly and economically.

Support provided by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware used in the attack
• Making contact with the hacker persona
• Evaluating the recovery risk
• Verifying the TA's decryption capabilities
• Agreeing on a settlement payment with the victim and the insurance provider
• Establishing a settlement and schedule with the TA
• Checking accordance with anti-money laundering (AML) laws
• Carrying out the crypto-currency payment to the TA
• Acquiring, reviewing, and operating the threat actor's decryption mechanism
• If needed, contacting the TA for technical help with the decryptor tool

• Quarantining affected endpoints to prevent further progress of the attack
• Making digital copies of each infected server and endpoint and data store to allow forensics without interfering with recovery
• Adding anti-virus agents to all virus-free endpoints
• Salvaging files from air-gapped restores or unscathed machines
• Creating a clean recovery environment
• Mapping and reconnecting datastores to match exactly their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current strains of ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") files. TAs are then able to demand an extra ransom for not posting this information on the dark web. Sadly, there exists no way to guarantee that stolen data have been totally deleted by the hacker. In fact, in numerous cases the hacker has limited control over the disposition of the data. Paying an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy lawyers, conducting an audit on which files were compromised, and performing the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises network services across the U.S. for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have been awarded high-level certifications in foundation technology platforms such as Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and ERP applications. This scope of expertise allows Progent to salvage and integrate the undamaged pieces of your network after a ransomware intrusion and rebuild them rapidly into a functioning network. Progent has collaborated with leading cyber insurance carriers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Birmingham
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Birmingham, phone Progent at 800-462-8800 or go to Contact Progent.