Ransomware Response Consultants

Progent's Ransomware Negotiation Services in Minnetonka
Progent has experience negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complex activity that calls for a mix of field experience, technical knowledge and business savvy. It also demands working closely with the cyber-extortion target's IT team and the insurance provider, if any. Because the top goal of the ransomware target is operational continuity, it is vital to establish recovery teams that work effectively, in parallel, and with intimate collaboration. Progent has the breadth of technical knowledge and the depth of experts to complement your IT support team and restore your network environment rapidly and economically.

Support offered by Progent's ransomware settlement team include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Deciding on an acceptable settlement amount with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and schedule with the hacker
• Verifying adherence to anti-money laundering (AML) sanctions
• Managing the crypto-currency payment to the TA
• Acquiring, learning, and using the threat actor's decryption mechanism
• If needed, contacting the TA for assistance with the decryption tool

• Quarantining infected endpoints to arrest the progress of the assault
• Creating digital copies of every compromised server and endpoint and data store in order to perform forensics in parallel with cleanup
• Installing A/V protection to all clean endpoints
• Restoring data from air-gapped backups or uncompromised machines
• Creating a pristine recovery environment
• Remapping and connecting datastores to reflect precisely their pre-attack condition

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") information. TAs can then require an additional payment in exchange for not posting this information on the dark web. Sadly, there is no way to prove that stolen files have been completely deleted by the hacker. Actually, in numerous cases the threat actor has little control over where the information ends up. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of privacy attorneys, conducting an inventory of data were compromised, and performing the required notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises IT services across the United States for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned high-level certifications in core technologies including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP software. This breadth of expertise gives Progent the ability to salvage and integrate the undamaged parts of your information system after a ransomware intrusion and rebuild them quickly into a viable network. Progent has collaborated with top cyber insurance carriers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Minnetonka
To contact with Progent about ransomware settlement expertise in Minnetonka, call Progent at 800-462-8800 or go to Contact Progent.