Ransomware Solutions Consulting Experts

Progent's Ransomware Negotiation Consulting in Minnetonka
Progent has experience negotiating ransomware settlements with threat actors (TAs). Negotiating an acceptable settlement is a complicated activity that calls for a mix of field experience, technical skills and business acumen. It also requires working closely with the ransomware victim's IT team and the insurance provider, if there is one. Since the top priority of the ransomware target is fast recovery, it is critical to deploy response groups that operate efficiently, in parallel, and with intimate collaboration. Progent offers the scope of technical skills and the deep bench of experts to complement your IT support team and recover your network environment quickly and affordably.

Support offered by Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware involved in the assault
• identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Testing the hacker's decryption tool
• Budgeting a settlement payment with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the TA
• Confirming adherence to anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the TA
• Acquiring, learning, and using the TA's decryptor utility
• If necessary, contacting the TA for assistance with the decryption utility

• Isolating affected endpoints to arrest the spread of the attack
• Creating digital copies of each breached server and endpoint and data store to allow forensics without interfering with recovery
• Adding A/V protection to all virus-free endpoints
• Recovering files from offline restores or uncompromised machines
• Building a pristine recovery environment
• Remapping and connecting drives to reflect precisely their pre-attack condition

Exfiltration Ransoms
In addition to extorting payment for a decryption utility, current strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to exfiltrate information. TAs can then require an extra settlement in exchange for not publishing this information on the dark web. Unfortunately, there exists no way to be certain that stolen files have been completely deleted by the TA. Actually, in many instances the threat actor has little say over where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of getting the advice of privacy attorneys, conducting an investigation into which data were taken, and sending the necessary alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises IT services throughout the U.S. for over two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have been awarded advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP-ISSAP, and CRISC. (See Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This breadth of skills allows Progent to salvage and consolidate the undamaged parts of your information system following a ransomware intrusion and reconstruct them quickly into a viable network. Progent has collaborated with leading insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Minnetonka
To contact with Progent about ransomware settlement guidance in Minnetonka, phone Progent at 800-462-8800 or go to Contact Progent.