Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Consulting in Greensboro
Progent has experience negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complex activity that requires a mix of real-word experience, technical knowledge and business savvy. It also requires close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if there is one. Since the top priority of the ransomware target is fast recovery, it is critical to establish response teams that work efficiently, concurrently, and in close communication. Progent has the breadth of IT skills and the depth of experts to supplement your network support team and recover your network quickly and economically.

Services provided by Progent's ransomware settlement experts include:

• Establishing the type of ransomware used in the assault
• identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Determining a settlement range with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and schedule with the hacker
• Confirming accordance with anti-money laundering (AML) laws
• Managing the crypto-currency disbursement to the hacker
• Receiving, learning, and operating the TA's decryption tool
• If needed, contacting the TA for technical assistance with the decryption tool

• Quarantining infected endpoints and data stores to prevent further progress of the attack
• Making digital copies of each compromised device and data store in order to perform forensics without interfering with recovery
• Adding A/V protection to all clean endpoints
• Restoring files from air-gapped backups or unscathed machines
• Building a clean recovery environment
• Remapping and connecting datastores to match exactly their pre-attack condition

Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate information. TAs can then demand an additional settlement in exchange for not publishing this information or selling it. Unfortunately, there exists no method to guarantee that exfiltrated data have been completely deleted by the hacker. In fact, in numerous instances the hacker has little control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy lawyers, performing an investigation into which data were stolen, and carrying out the mandated notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises IT services across the United States for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned prestigious certifications including CISM, CISSP, and GIAC. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP application software. This scope of skills allows Progent to identify and consolidate the undamaged pieces of your information system following a ransomware attack and rebuild them rapidly into a viable network. Progent has collaborated with leading insurance providers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Greensboro
To get in touch with Progent about crypto-ransomware settlement negotiation services in Greensboro, call Progent at 800-462-8800 or go to Contact Progent.