Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Birmingham
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex activity that calls for a mix of real-word experience, technical knowledge and business acumen. It also requires working closely with the cyber-extortion target's IT team and the insurance provider, if any. Because the number one priority of the ransomware target is fast recovery, it is critical to deploy response teams that work efficiently, concurrently, and in close communication. Progent has the breadth of technical knowledge and the deep bench of personnel to complement your network support team and recover your network environment quickly and economically.

Services offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Validating the hacker's decryption capabilities
• Deciding on an acceptable settlement payment with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the threat actor
• Confirming accordance with anti-money laundering (AML) laws
• Carrying out the crypto-currency disbursement to the TA
• Receiving, learning, and using the threat actor's decryption utility
• If necessary, contacting the threat actor for technical assistance with the decryption tool

• Quarantining affected endpoints and data stores to prevent further progress of the assault
• Making digital copies of every breached device and data store in order to perform forensics without interfering with recovery
• Installing anti-virus protection to all clean endpoints
• Restoring data from air-gapped restores or unscathed endpoints
• Building a pristine environment
• Mapping and connecting datastores to reflect exactly their pre-encryption state

Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern strains of ransomware like Ryuk, Maze, Netwalker, and Egregor commonly attempt to exfiltrate information. TAs are then able to demand an additional settlement for not publishing this data or selling it. Unfortunately, there exists no way to prove that stolen files have been completely deleted by the threat actor. Actually, in numerous cases the hacker has little say over where the information ends up. Settling an exfiltration ransom does not eliminate the need for getting the advice of privacy attorneys, performing an audit on which files were taken, and carrying out the required alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and onsite IT services throughout the U.S. for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technologies such as Cisco networking, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This broad array of expertise gives Progent the ability to salvage and integrate the undamaged pieces of your network following a ransomware attack and rebuild them rapidly into a viable network. Progent has collaborated with leading insurance carriers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Birmingham
To contact with Progent about crypto-ransomware settlement guidance in Birmingham, call Progent at 800-462-8800 or go to Contact Progent.