Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Birmingham
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated exercise that calls for a combination of field experience, technical skills and business savvy. It also demands close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Since the top goal of the ransomware victim is fast recovery, it is critical to establish recovery groups that work efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of technical skills and the deep bench of personnel to supplement your IT support team and recover your network environment rapidly and affordably.

Support available from Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Budgeting a settlement range with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the hacker
• Checking compliance with anti-money laundering laws
• Carrying out the crypto-currency payment to the hacker
• Acquiring, learning, and operating the hacker's decryptor mechanism
• If necessary, contacting the TA for technical help with the decryption tool

• Quarantining infected endpoints to arrest the spread of the assault
• Making digital copies of each infected device and data store to allow forensics in parallel with recovery
• Installing anti-virus protection to all virus-free endpoints
• Recovering files from air-gapped restores or unscathed endpoints
• Creating a pristine recovery environment
• Remapping and connecting drives to match exactly their pre-encryption condition

Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern strains of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to exfiltrate information. Hackers can then demand an extra ransom for not posting this information on the dark web. Unfortunately, there is no way to prove that exfiltrated data have been totally deleted by the TA. In fact, in many cases the threat actor has limited control over data custody. Paying an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy lawyers, performing an investigation into which data were taken, and carrying out the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and onsite IT services across the United States for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded advanced certifications in core technologies such as Cisco networking, VMware, and major Linux distros. Progent's data security consultants have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and ERP software. This scope of expertise gives Progent the ability to identify and integrate the surviving pieces of your information system after a ransomware assault and rebuild them quickly into a functioning network. Progent has collaborated with leading cyber insurance providers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Birmingham
To contact with Progent about ransomware settlement negotiation services in Birmingham, call Progent at 800-462-8800 or go to Contact Progent.