Ransomware Solutions Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Aurora
Progent has experience negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated activity that requires a mix of field experience, technical skills and business acumen. It also requires working closely with the ransomware victim's IT team and the cyber insurance carrier, if any. Since the number one priority of the ransomware target is operational continuity, it is critical to establish recovery groups that operate efficiently, concurrently, and in close communication. Progent offers the breadth of technical skills and the depth of experts to supplement your IT staff and restore your network environment quickly and economically.

Support provided by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Validating the hacker's decryption capabilities
• Determining a settlement range with the ransomware victim and the cyber insurance provider
• Negotiating a settlement amount and timeline with the TA
• Confirming accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the TA
• Receiving, reviewing, and operating the hacker's decryption utility
• If necessary, contacting the hacker for assistance with the decryption utility

• Isolating affected endpoints and data stores to arrest the progress of the assault
• Creating digital copies of each compromised device and data store to allow forensics in parallel with cleanup
• Adding anti-virus agents to all virus-free endpoints
• Restoring data from air-gapped restores or uncompromised machines
• Creating a pristine recovery environment
• Remapping and connecting datastores to reflect precisely their pre-encryption state

Paying Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") information. TAs are then able to demand an additional ransom for not publishing this information on the dark web. Sadly, there is no method to be certain that exfiltrated data have been totally deleted by the threat actor. Actually, in numerous instances the hacker has limited control over the disposition of the data. Paying an exfiltration ransom does not free you from the need for engaging the guidance of privacy lawyers, performing an investigation into which data were stolen, and sending the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises network services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned high-level certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning application software. This broad array of skills allows Progent to identify and integrate the surviving parts of your IT environment following a ransomware intrusion and reconstruct them rapidly into a viable system. Progent has worked with leading insurance carriers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Aurora
To contact with Progent about crypto-ransomware settlement negotiation services in Aurora, call Progent at 800-462-8800 or go to Contact Progent.