Ransomware Solutions Consulting Services

Progent's Ransomware Negotiation Services in Bristol
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex activity that calls for a mix of field experience, technical knowledge and business acumen. It also demands working closely with the cyber-extortion target's IT team and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware victim is operational continuity, it is vital to deploy recovery groups that operate efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of technical knowledge and the depth of experts to supplement your IT support team and restore your network quickly and economically.

Services available from Progent's ransomware settlement experts include:

• Determining the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Validating the hacker's decryption capabilities
• Determining a settlement payment with the victim and the cyber insurance provider
• Negotiating a settlement and timeline with the threat actor
• Verifying adherence to anti-money laundering (AML) laws
• Carrying out the crypto-currency disbursement to the TA
• Receiving, learning, and operating the threat actor's decryptor tool
• If needed, contacting the threat actor for assistance with the decryption utility

• Quarantining affected endpoints and data stores to prevent further spread of the assault
• Creating digital copies of each breached server and endpoint and data store to allow forensics without interfering with cleanup
• Installing anti-virus protection to all clean endpoints
• Salvaging data from offline restores or unscathed endpoints
• Building a clean recovery environment
• Remapping and reconnecting drives to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. Hackers can then require an extra ransom for not publishing this data on the dark web. Sadly, there exists no method to prove that stolen data have been completely deleted by the TA. In fact, in many cases the threat actor has little say about where the information ends up. Settling an exfiltration ransom does not free you from the need for engaging the advice of privacy attorneys, conducting an investigation into which files were taken, and sending the required alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and on-premises network services throughout the United States for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technologies including Cisco networking, VMware, and popular Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial management and ERP application software. This scope of skills gives Progent the ability to identify and integrate the surviving pieces of your information system following a ransomware intrusion and rebuild them rapidly into a functioning system. Progent has worked with top cyber insurance carriers like Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Bristol
To get in touch with Progent about crypto-ransomware settlement expertise in Bristol, call Progent at 800-462-8800 or go to Contact Progent.