Ransomware Response Consulting Experts

Progent's Ransomware Negotiation Consulting in Fort Wayne
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex exercise that calls for a combination of field experience, technical knowledge and business savvy. It also calls for close co-operation with the victim's IT team and the cyber insurance carrier, if any. Because the top goal of the ransomware target is operational continuity, it is critical to establish response teams that operate effectively, in parallel, and in close communication. Progent has the breadth of technical knowledge and the depth of personnel to supplement your network support team and recover your network environment rapidly and affordably.

Services offered by Progent's ransomware negotiation team include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the recovery risk
• Testing the TA's decryption capabilities
• Budgeting a settlement payment with the ransomware victim and the cyber insurance provider
• Establishing a settlement and schedule with the threat actor
• Verifying compliance with anti-money laundering (AML) sanctions
• Managing the crypto-currency transfer to the TA
• Receiving, learning, and operating the threat actor's decryptor mechanism
• If necessary, contacting the hacker for assistance with the decryption utility

• Isolating infected endpoints and data stores to arrest the spread of the assault
• Making digital copies of each compromised server and endpoint and data store in order to perform forensics without interfering with restoration
• Installing A/V protection to all virus-free endpoints
• Restoring files from offline restores or uncompromised endpoints
• Building a clean recovery environment
• Remapping and connecting drives to match exactly their pre-attack state

Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate information. TAs are then able to require a separate ransom in exchange for not publishing this information or selling it. Unfortunately, there is no way to guarantee that stolen files have been completely deleted by the hacker. In fact, in numerous instances the TA has little control over where the information ends up. Settling an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, conducting an audit on which files were taken, and carrying out the necessary alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services throughout the United States for more than 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned industry-recognized certifications including CISA, CISSP-ISSAP, and GIAC. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP applications. This breadth of expertise gives Progent the ability to salvage and consolidate the undamaged pieces of your network following a ransomware assault and rebuild them rapidly into a functioning system. Progent has worked with leading cyber insurance providers like Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Fort Wayne
To get in touch with Progent about crypto-ransomware settlement expertise in Fort Wayne, phone Progent at 800-462-8800 or go to Contact Progent.