Ransomware Solutions Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Aurora
Progent has experience negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complex activity that requires a mix of real-word experience, technical skills and business savvy. It also demands close co-operation with the cyber-extortion target's IT team and the insurance provider, if there is one. Because the top priority of the ransomware victim is operational continuity, it is vital to establish response groups that operate effectively, in parallel, and with intimate collaboration. Progent has the scope of technical skills and the depth of personnel to supplement your network support team and recover your network environment quickly and economically.

Services offered by Progent's ransomware negotiation team include:

• Establishing the type of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Testing the TA's decryption capabilities
• Deciding on an acceptable settlement range with the victim and the insurance carrier
• Negotiating a settlement and timeline with the hacker
• Confirming compliance with anti-money laundering regulations
• Managing the crypto-currency payment to the hacker
• Acquiring, reviewing, and using the TA's decryptor tool
• If needed, contacting the hacker for assistance with the decryptor utility

• Isolating affected endpoints to prevent further progress of the attack
• Making digital copies of every breached server and endpoint and data store to allow forensics without interfering with cleanup
• Adding anti-virus agents to all clean endpoints
• Salvaging data from offline backups or uncompromised endpoints
• Creating a pristine recovery environment
• Remapping and reconnecting datastores to reflect exactly their pre-encryption state

Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often try to steal (or "exfiltrate") files. TAs can then require an additional payment in exchange for not divulging this information on the dark web. Unfortunately, there exists no way to be certain that stolen files have been completely deleted by the TA. Actually, in numerous cases the TA has limited control over where the information ends up. Paying an exfiltration ransom does not eliminate the need for getting the guidance of privacy attorneys, performing an audit on which data were taken, and carrying out the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have been awarded high-level certifications in foundation technologies including Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity experts have earned prestigious certifications such as CISA, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and Enterprise Resource Planning software. This scope of expertise gives Progent the ability to identify and integrate the undamaged parts of your IT environment following a ransomware assault and rebuild them quickly into a functioning network. Progent has worked with leading insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Aurora
To contact with Progent about ransomware settlement negotiation services in Aurora, phone Progent at 800-462-8800 or go to Contact Progent.