Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Consulting in Denver
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that requires a mix of field experience, technical knowledge and business acumen. It also requires working closely with the cyber-extortion target's IT staff and the insurance carrier, if any. Since the top priority of the ransomware victim is fast recovery, it is vital to deploy recovery teams that work effectively, concurrently, and in close communication. Progent offers the breadth of IT knowledge and the deep bench of experts to complement your network staff and restore your network rapidly and economically.

Support available from Progent's ransomware settlement experts include:

• Determining the type of ransomware used in the attack
• identifying and contacting the hacker
• Assessing the likelihood of recovery
• Testing the threat actor's decryption tool
• Determining a settlement with the victim and the insurance carrier
• Establishing a settlement and schedule with the hacker
• Confirming compliance with anti-money laundering (AML) laws
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and using the threat actor's decryption tool
• If necessary, contacting the TA for assistance with the decryption utility

• Quarantining affected endpoints and data stores to arrest the spread of the attack
• Making digital copies of every compromised server and endpoint and data store to allow forensics without interfering with cleanup
• Installing anti-virus agents to all clean endpoints
• Recovering files from offline backups or uncompromised machines
• Creating a clean recovery environment
• Remapping and connecting datastores to match precisely their pre-attack condition

Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern variants of ransomware like Ryuk, Maze, Netwalker, and Egregor commonly try to exfiltrate files. Hackers are then able to demand an additional payment for not divulging this data or selling it. Sadly, there is no way to guarantee that stolen data have been completely deleted by the TA. In fact, in numerous cases the threat actor has little say about the disposition of the data. Paying an exfiltration ransom does not eliminate the necessity of getting the advice of privacy attorneys, conducting an inventory of files were taken, and carrying out the necessary alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises IT services throughout the United States for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned high-level certifications in core technology platforms such as Cisco networking, VMware virtualization, and major Linux distros. Progent's data security experts have earned industry-recognized certifications including CISM, CISSP, and GIAC. (See Progent's certifications). Progent also offers guidance in financial management and ERP software. This scope of expertise allows Progent to salvage and consolidate the undamaged parts of your IT environment after a ransomware assault and reconstruct them quickly into an operational network. Progent has worked with leading cyber insurance providers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Denver
To get in touch with Progent about crypto-ransomware settlement guidance in Denver, phone Progent at 800-462-8800 or go to Contact Progent.