Ransomware Solutions Consulting Experts

Progent's Ransomware Settlement Negotiation Consulting in Detroit
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex activity that requires a mix of field experience, technical knowledge and business savvy. It also requires close co-operation with the cyber-extortion target's IT team and the insurance provider, if there is one. Since the top goal of the ransomware victim is fast recovery, it is critical to establish response groups that operate effectively, in parallel, and with intimate collaboration. Progent offers the breadth of IT knowledge and the depth of experts to supplement your network staff and recover your network rapidly and affordably.

Support offered by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware used in the attack
• Identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Verifying the threat actor's decryption capabilities
• Budgeting a settlement payment with the ransomware victim and the insurance provider
• Negotiating a settlement amount and timeline with the hacker
• Verifying compliance with anti-money laundering (AML) sanctions
• Managing the crypto-currency payment to the hacker
• Receiving, learning, and operating the threat actor's decryption mechanism
• If needed, contacting the threat actor for assistance with the decryptor tool

• Isolating infected endpoints and data stores to arrest the spread of the assault
• Creating digital copies of every infected device and data store to allow forensics in parallel with recovery
• Adding anti-virus protection to all virus-free endpoints
• Restoring files from offline backups or uncompromised endpoints
• Creating a pristine recovery environment
• Remapping and reconnecting datastores to match exactly their pre-encryption state

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern strains of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often try to exfiltrate information. TAs are then able to demand an additional settlement for not publishing this information on the dark web. Sadly, there exists no method to guarantee that stolen files have been completely deleted by the TA. Actually, in many cases the TA has limited say over data custody. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of privacy lawyers, conducting an investigation into which data were stolen, and performing the required alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite IT services throughout the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have earned advanced certifications in foundation technology platforms including Cisco networking, VMware, and major distributions of Linux. Progent's data security consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP applications. This broad array of skills allows Progent to salvage and integrate the surviving parts of your IT environment after a ransomware attack and reconstruct them rapidly into an operational system. Progent has worked with leading cyber insurance carriers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Detroit
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Detroit, call Progent at 800-462-8800 or go to Contact Progent.