Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Louisville
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated activity that requires a mix of field experience, technical knowledge and business savvy. It also calls for working closely with the cyber-extortion target's IT staff and the insurance provider, if any. Since the number one priority of the ransomware target is fast recovery, it is critical to deploy recovery groups that work effectively, in parallel, and in close communication. Progent has the scope of technical knowledge and the deep bench of experts to complement your network staff and recover your network quickly and affordably.

Services available from Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Validating the hacker's decryption capabilities
• Agreeing on a settlement amount with the ransomware victim and the insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Verifying accordance with anti-money laundering (AML) laws
• Overseeing the crypto-currency transfer to the TA
• Receiving, learning, and operating the TA's decryption tool
• If needed, contacting the hacker for technical help with the decryptor utility

• Isolating affected endpoints to prevent further spread of the assault
• Making replicas of every compromised server and endpoint and data store in order to perform forensics without interfering with cleanup
• Installing anti-virus agents to all virus-free endpoints
• Restoring files from offline restores or uncompromised machines
• Building a clean recovery environment
• Remapping and reconnecting datastores to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current strains of ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly try to exfiltrate files. TAs can then require an extra payment in exchange for not publishing this information on the dark web. Sadly, there is no way to guarantee that exfiltrated files have been completely erased by the hacker. In fact, in numerous cases the hacker has limited say about who can access the stolen files. Settling an exfiltration ransom does not free you from the need for engaging the advice of privacy lawyers, conducting an investigation into which data were taken, and carrying out the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and onsite IT services across the United States for over two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in foundation technologies including Cisco infrastructure, VMware, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP, and GIAC. (See Progent's certifications). Progent also offers top-tier support in financial management and ERP software. This breadth of expertise gives Progent the ability to identify and integrate the surviving pieces of your information system following a ransomware attack and rebuild them quickly into a viable system. Progent has collaborated with leading cyber insurance carriers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Louisville
To contact with Progent about ransomware settlement expertise in Louisville, phone Progent at 800-462-8800 or go to Contact Progent.