Ransomware Solutions Services

Overview of Progent's Ransomware Negotiation Consulting in Cincinnati
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex exercise that calls for a mix of real-word experience, technical skills and business savvy. It also calls for working closely with the cyber-extortion target's IT team and the cyber insurance provider, if any. Since the top priority of the ransomware target is fast recovery, it is critical to deploy response teams that work efficiently, concurrently, and in close communication. Progent offers the scope of IT skills and the deep bench of personnel to complement your IT staff and recover your network environment rapidly and economically.

Services available from Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware used in the assault
• Making contact with the hacker
• Assessing the recovery risk
• Validating the TA's decryption tool
• Deciding on an acceptable settlement amount with the victim and the insurance provider
• Negotiating a settlement and timeline with the TA
• Confirming compliance with anti-money laundering sanctions
• Managing the crypto-currency payment to the hacker
• Receiving, learning, and operating the TA's decryption utility
• If needed, contacting the hacker for technical help with the decryption tool

• Quarantining affected endpoints and data stores to arrest the spread of the assault
• Creating replicas of every infected server and endpoint and data store to allow forensics in parallel with cleanup
• Installing A/V protection to all clean endpoints
• Recovering files from offline restores or uncompromised endpoints
• Building a pristine environment
• Remapping and connecting datastores to reflect exactly their pre-encryption state

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption utility, modern variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate information. TAs are then able to demand a separate ransom in exchange for not divulging this information or selling it. Sadly, there is no method to prove that stolen files have been totally deleted by the hacker. In fact, in numerous cases the TA has limited control over where the information ends up. Paying an exfiltration ransom does not eliminate the necessity of seeking the guidance of legal counsel, conducting an investigation into which data were compromised, and sending the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and onsite network services across the United States for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded advanced certifications in foundation technologies including Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and ERP applications. This breadth of skills allows Progent to identify and integrate the surviving pieces of your information system following a ransomware intrusion and reconstruct them quickly into a functioning network. Progent has collaborated with top insurance carriers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Cincinnati
To contact with Progent about crypto-ransomware settlement guidance in Cincinnati, call Progent at 800-462-8800 or go to Contact Progent.