Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Denver
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that requires a mix of field experience, technical knowledge and business acumen. It also calls for working closely with the cyber-extortion target's IT team and the insurance carrier, if any. Because the top priority of the ransomware victim is fast recovery, it is vital to establish response groups that operate effectively, in parallel, and in close communication. Progent has the breadth of technical skills and the depth of personnel to complement your network support team and restore your network environment quickly and economically.

Services available from Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware involved in the attack
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Agreeing on a settlement range with the victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the TA
• Confirming compliance with anti-money laundering (AML) laws
• Managing the crypto-currency transfer to the hacker
• Acquiring, learning, and using the threat actor's decryptor mechanism
• If necessary, contacting the hacker for assistance with the decryptor tool

• Quarantining infected endpoints to prevent further spread of the attack
• Creating digital copies of each compromised server and endpoint and data store to allow forensics in parallel with restoration
• Adding anti-virus protection to all clean endpoints
• Recovering data from air-gapped restores or unscathed machines
• Building a pristine recovery environment
• Mapping and reconnecting drives to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current variants of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often attempt to steal (or "exfiltrate") information. Hackers are then able to require a separate ransom for not posting this information or selling it. Sadly, there exists no way to prove that stolen data have been completely erased by the threat actor. Actually, in many cases the TA has limited control over data custody. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of legal counsel, performing an investigation into which files were taken, and performing the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services throughout the U.S. for over 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned prestigious certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial management and ERP application software. This broad array of expertise gives Progent the ability to salvage and integrate the undamaged parts of your information system following a ransomware assault and reconstruct them rapidly into an operational system. Progent has collaborated with top cyber insurance providers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Denver
To get in touch with Progent about crypto-ransomware settlement services in Denver, phone Progent at 800-462-8800 or go to Contact Progent.