Ransomware Response Services

Overview of Progent's Ransomware Negotiation Consulting in Madison
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated exercise that calls for a mix of field experience, IT skills and business savvy. It also requires working closely with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the top priority of the ransomware victim is operational continuity, it is vital to deploy response teams that work effectively, in parallel, and with intimate collaboration. Progent has the scope of IT skills and the depth of personnel to complement your IT staff and restore your network environment quickly and economically.

Services offered by Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware involved in the attack
• identifying and contacting the hacker
• Assessing the recovery risk
• Validating the TA's decryption tool
• Budgeting a settlement with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and timeline with the threat actor
• Confirming accordance with anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and operating the TA's decryptor mechanism
• If necessary, contacting the hacker for assistance with the decryption tool

• Quarantining affected endpoints to prevent further spread of the assault
• Creating replicas of each compromised server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing anti-virus protection to all clean endpoints
• Salvaging data from offline backups or uncompromised endpoints
• Creating a clean environment
• Mapping and connecting datastores to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to demanding money for a decryption utility, current strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to steal (or "exfiltrate") information. Hackers can then demand a separate ransom in exchange for not divulging this information on the dark web. Sadly, there is no method to prove that stolen data have been completely deleted by the TA. Actually, in numerous cases the hacker has little say over the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of getting the advice of privacy attorneys, performing an inventory of files were compromised, and sending the necessary notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services across the U.S. for over two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned advanced certifications in core technology platforms including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP, and GIAC. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP software. This broad array of expertise gives Progent the ability to salvage and consolidate the undamaged pieces of your IT environment after a ransomware attack and reconstruct them rapidly into a viable network. Progent has collaborated with top cyber insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Madison
To contact with Progent about ransomware settlement expertise in Madison, phone Progent at 800-462-8800 or go to Contact Progent.