Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Birmingham
Progent has experience negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated exercise that calls for a combination of real-word experience, technical skills and business savvy. It also demands close co-operation with the ransomware victim's IT team and the cyber insurance provider, if any. Since the top goal of the ransomware victim is operational continuity, it is vital to establish recovery groups that operate effectively, concurrently, and in close communication. Progent offers the scope of technical skills and the depth of personnel to supplement your network staff and restore your network quickly and economically.

Support available from Progent's ransomware negotiation team include:

• Establishing the kind of ransomware involved in the assault
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Validating the threat actor's decryption tool
• Agreeing on a settlement range with the victim and the insurance carrier
• Establishing a settlement and schedule with the threat actor
• Confirming adherence to anti-money laundering (AML) laws
• Managing the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and using the TA's decryptor utility
• If needed, contacting the hacker for technical help with the decryption utility

• Isolating affected endpoints and data stores to arrest the progress of the attack
• Creating digital copies of each compromised server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding A/V agents to all clean endpoints
• Salvaging data from offline backups or uncompromised endpoints
• Building a clean recovery environment
• Remapping and connecting drives to match precisely their pre-attack condition

Paying Exfiltration Ransoms
Beyond extorting money for a decryption utility, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate information. Hackers are then able to require an additional payment in exchange for not divulging this information on the dark web. Unfortunately, there is no way to prove that exfiltrated files have been completely deleted by the hacker. In fact, in numerous instances the TA has limited say over the disposition of the data. Paying an exfiltration ransom does not free you from the need for getting the guidance of privacy lawyers, performing an audit on which files were stolen, and sending the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises network services throughout the United States for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have been awarded advanced certifications in foundation technologies including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned industry-recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and Enterprise Resource Planning application software. This scope of expertise allows Progent to identify and consolidate the surviving parts of your information system after a ransomware attack and rebuild them rapidly into a viable system. Progent has collaborated with top cyber insurance carriers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Birmingham
To get in touch with Progent about ransomware settlement negotiation services in Birmingham, call Progent at 800-462-8800 or go to Contact Progent.