Ransomware Solutions Consultants

Overview of Progent's Ransomware Negotiation Consulting in Greensboro
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complicated exercise that calls for a combination of real-word experience, technical knowledge and business acumen. It also requires close co-operation with the victim's IT staff and the insurance carrier, if there is one. Since the number one priority of the ransomware target is fast recovery, it is critical to establish recovery teams that operate efficiently, in parallel, and in close communication. Progent has the breadth of IT skills and the deep bench of experts to supplement your IT staff and restore your network rapidly and economically.

Support provided by Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware involved in the assault
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Validating the TA's decryption capabilities
• Deciding on an acceptable settlement amount with the victim and the cyber insurance carrier
• Establishing a settlement and timeline with the TA
• Checking adherence to anti-money laundering laws
• Carrying out the crypto-currency disbursement to the TA
• Receiving, learning, and operating the threat actor's decryption mechanism
• If needed, contacting the TA for technical assistance with the decryptor tool

• Isolating infected endpoints to prevent further spread of the assault
• Creating replicas of each infected server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding A/V protection to all virus-free endpoints
• Restoring files from offline backups or unscathed machines
• Creating a pristine environment
• Mapping and reconnecting datastores to reflect exactly their pre-attack state

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current variants of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. Hackers can then demand an extra payment in exchange for not posting this information on the dark web. Unfortunately, there exists no method to prove that exfiltrated files have been totally erased by the TA. In fact, in numerous cases the TA has little control over data custody. Paying an exfiltration ransom does not eliminate the necessity of getting the advice of legal counsel, conducting an audit on which data were taken, and carrying out the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite IT services across the U.S. for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned advanced certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned prestigious certifications including CISM, CISSP-ISSAP, and CRISC. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP software. This broad array of skills allows Progent to identify and integrate the undamaged parts of your IT environment following a ransomware attack and rebuild them rapidly into an operational network. Progent has collaborated with leading insurance carriers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Greensboro
To get in touch with Progent about ransomware settlement services in Greensboro, call Progent at 800-462-8800 or go to Contact Progent.