Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Louisville
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated activity that calls for a combination of real-word experience, technical skills and business savvy. It also requires working closely with the ransomware victim's IT staff and the cyber insurance carrier, if there is one. Since the number one goal of the ransomware target is operational continuity, it is critical to deploy recovery teams that operate effectively, in parallel, and in close communication. Progent has the scope of IT knowledge and the deep bench of personnel to complement your IT support team and recover your network environment rapidly and affordably.

Support provided by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware involved in the assault
• making contact with the hacker persona
• Assessing the likelihood of recovery
• Validating the threat actor's decryption tool
• Determining a settlement range with the ransomware victim and the insurance provider
• Negotiating a settlement and timeline with the hacker
• Verifying compliance with anti-money laundering (AML) laws
• Overseeing the crypto-currency payment to the hacker
• Acquiring, reviewing, and using the threat actor's decryption mechanism
• If necessary, contacting the hacker for technical help with the decryptor utility

• Isolating infected endpoints to arrest the progress of the assault
• Creating replicas of each compromised device and data store in order to perform forensics without interfering with restoration
• Installing anti-virus protection to all clean endpoints
• Recovering files from offline backups or uncompromised endpoints
• Creating a clean environment
• Remapping and connecting datastores to match exactly their pre-encryption condition

Exfiltration Ransoms
Beyond demanding money for a decryption utility, current variants of ransomware such as Ryuk, Maze, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") files. TAs are then able to demand an additional ransom for not divulging this data or selling it. Sadly, there exists no method to be certain that exfiltrated files have been totally deleted by the hacker. In fact, in numerous cases the threat actor has limited control over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for seeking the guidance of privacy lawyers, conducting an investigation into which data were compromised, and performing the mandated notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and on-premises network services throughout the U.S. for more than two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned advanced certifications in core technologies including Cisco networking, VMware, and major Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP, and CRISC. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP application software. This broad array of skills allows Progent to salvage and consolidate the undamaged pieces of your IT environment after a ransomware assault and rebuild them rapidly into a viable system. Progent has collaborated with top insurance carriers including Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Louisville
To contact with Progent about crypto-ransomware settlement services in Louisville, call Progent at 800-462-8800 or go to Contact Progent.