Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Kansas City
Progent has experience negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex exercise that requires a combination of field experience, IT knowledge and business savvy. It also calls for close co-operation with the ransomware victim's IT team and the insurance provider, if any. Because the top goal of the ransomware target is fast recovery, it is vital to deploy recovery teams that work effectively, concurrently, and with intimate collaboration. Progent offers the breadth of technical knowledge and the depth of personnel to supplement your network staff and restore your network quickly and economically.

Support provided by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Validating the TA's decryption tool
• Budgeting a settlement amount with the victim and the insurance carrier
• Establishing a settlement amount and timeline with the hacker
• Verifying adherence to anti-money laundering laws
• Carrying out the crypto-currency payment to the TA
• Acquiring, learning, and operating the hacker's decryptor tool
• If needed, contacting the hacker for technical assistance with the decryption tool

• Isolating infected endpoints and data stores to arrest the progress of the attack
• Making replicas of every infected device and data store in order to perform forensics without interfering with recovery
• Adding A/V protection to all clean endpoints
• Salvaging files from offline restores or uncompromised machines
• Building a clean recovery environment
• Mapping and connecting datastores to reflect precisely their pre-encryption state

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate files. Hackers can then demand an extra settlement for not posting this information on the dark web. Sadly, there is no method to be certain that exfiltrated data have been completely erased by the TA. Actually, in many cases the threat actor has limited say over where the information ends up. Paying an exfiltration ransom does not eliminate the need for getting the guidance of privacy attorneys, conducting an audit on which data were compromised, and sending the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises network services across the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have been awarded advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned prestigious certifications including CISA, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning software. This scope of skills gives Progent the ability to identify and integrate the undamaged pieces of your information system following a ransomware attack and reconstruct them rapidly into a functioning network. Progent has worked with top insurance providers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Kansas City
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Kansas City, call Progent at 800-462-8800 or go to Contact Progent.