Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Cincinnati
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex exercise that requires a mix of real-word experience, IT knowledge and business savvy. It also calls for working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if there is one. Since the top goal of the ransomware victim is fast recovery, it is vital to deploy recovery teams that work efficiently, in parallel, and in close communication. Progent offers the breadth of IT knowledge and the depth of experts to supplement your network staff and restore your network quickly and economically.

Services provided by Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware used in the assault
• making contact with the hacker persona
• Assessing the recovery risk
• Verifying the hacker's decryption capabilities
• Budgeting a settlement payment with the ransomware victim and the cyber insurance provider
• Establishing a settlement amount and schedule with the hacker
• Confirming adherence to anti-money laundering regulations
• Managing the crypto-currency payment to the hacker
• Receiving, learning, and using the TA's decryption tool
• If necessary, contacting the hacker for technical help with the decryptor utility

• Quarantining infected endpoints and data stores to prevent further progress of the assault
• Making digital copies of every compromised server and endpoint and data store to allow forensics in parallel with recovery
• Installing A/V agents to all virus-free endpoints
• Salvaging files from offline backups or unscathed endpoints
• Building a clean environment
• Mapping and connecting drives to reflect precisely their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current variants of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to exfiltrate files. Hackers are then able to require an additional ransom in exchange for not divulging this data or selling it. Sadly, there is no method to be certain that exfiltrated data have been totally deleted by the TA. In fact, in numerous instances the threat actor has little control about where the information ends up. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of privacy attorneys, conducting an inventory of files were stolen, and performing the mandated alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises network services across the United States for more than 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP, and GIAC. (See Progent's certifications). Progent also offers guidance in financial management and ERP application software. This broad array of expertise gives Progent the ability to salvage and integrate the undamaged parts of your information system after a ransomware intrusion and reconstruct them rapidly into an operational system. Progent has collaborated with leading cyber insurance providers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Cincinnati
To get in touch with Progent about ransomware settlement negotiation expertise in Cincinnati, call Progent at 800-462-8800 or go to Contact Progent.