Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Cincinnati
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complicated exercise that requires a combination of field experience, technical knowledge and business acumen. It also demands close co-operation with the ransomware victim's IT team and the cyber insurance provider, if any. Since the number one priority of the ransomware target is fast recovery, it is vital to deploy response groups that operate efficiently, in parallel, and in close communication. Progent offers the breadth of IT skills and the deep bench of experts to complement your network support team and recover your network rapidly and affordably.

Support provided by Progent's ransomware settlement team include:

• Determining the type of ransomware involved in the attack
• Making contact with the hacker persona
• Assessing the recovery risk
• Testing the threat actor's decryption capabilities
• Agreeing on a settlement with the ransomware victim and the insurance provider
• Establishing a settlement amount and timeline with the threat actor
• Verifying accordance with anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the TA
• Receiving, learning, and using the threat actor's decryptor mechanism
• If needed, contacting the threat actor for assistance with the decryptor tool

• Quarantining affected endpoints and data stores to prevent further spread of the attack
• Creating replicas of every breached server and endpoint and data store to allow forensics in parallel with recovery
• Installing anti-virus agents to all clean endpoints
• Salvaging data from air-gapped backups or uncompromised machines
• Creating a clean recovery environment
• Mapping and connecting drives to reflect precisely their pre-encryption condition

Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate information. Hackers are then able to require an extra settlement for not posting this data or selling it. Sadly, there exists no way to be certain that exfiltrated files have been totally deleted by the hacker. In fact, in numerous instances the hacker has limited say about the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy lawyers, conducting an investigation into which data were taken, and sending the required notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned advanced certifications in core technologies such as Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and ERP applications. This breadth of expertise allows Progent to salvage and integrate the undamaged parts of your network following a ransomware attack and reconstruct them rapidly into a viable network. Progent has collaborated with leading insurance carriers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Cincinnati
To get in touch with Progent about ransomware settlement negotiation expertise in Cincinnati, call Progent at 800-462-8800 or go to Contact Progent.