Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Consulting in Madison
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that calls for a combination of real-word experience, IT skills and business acumen. It also demands close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if any. Since the number one goal of the ransomware target is fast recovery, it is critical to deploy response groups that operate efficiently, in parallel, and in close communication. Progent offers the breadth of technical skills and the depth of personnel to supplement your IT support team and recover your network environment quickly and economically.

Services provided by Progent's ransomware settlement negotiation experts include:

• Establishing the kind of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Determining a settlement payment with the victim and the insurance provider
• Negotiating a settlement and schedule with the TA
• Confirming adherence to anti-money laundering regulations
• Carrying out the crypto-currency transfer to the hacker
• Receiving, learning, and using the threat actor's decryption utility
• If needed, contacting the TA for technical help with the decryptor tool

• Isolating affected endpoints to arrest the progress of the assault
• Making replicas of every compromised device and data store to allow forensics without interfering with restoration
• Installing anti-virus agents to all virus-free endpoints
• Restoring files from air-gapped backups or unscathed endpoints
• Building a clean environment
• Mapping and reconnecting datastores to reflect exactly their pre-encryption condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate information. TAs are then able to require an additional payment for not publishing this information or selling it. Sadly, there is no way to prove that exfiltrated files have been completely erased by the hacker. In fact, in many cases the TA has little control about data custody. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of privacy lawyers, conducting an investigation into which files were stolen, and performing the required notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite network services throughout the U.S. for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have been awarded high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP, and GIAC. (Refer to Progent's certifications). Progent also offers top-tier support in financial and Enterprise Resource Planning application software. This breadth of skills gives Progent the ability to identify and integrate the surviving parts of your network following a ransomware intrusion and reconstruct them quickly into a viable system. Progent has worked with leading insurance providers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Madison
To get in touch with Progent about ransomware settlement negotiation services in Madison, call Progent at 800-462-8800 or go to Contact Progent.