Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Detroit
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated exercise that calls for a combination of field experience, technical skills and business acumen. It also demands close co-operation with the cyber-extortion target's IT team and the insurance carrier, if any. Because the number one priority of the ransomware victim is operational continuity, it is critical to deploy recovery teams that work efficiently, concurrently, and in close communication. Progent has the scope of technical knowledge and the deep bench of personnel to supplement your network support team and recover your network environment quickly and affordably.

Services available from Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Verifying the TA's decryption capabilities
• Determining a settlement payment with the victim and the insurance carrier
• Establishing a settlement and schedule with the TA
• Confirming compliance with anti-money laundering (AML) laws
• Carrying out the crypto-currency payment to the TA
• Acquiring, reviewing, and operating the threat actor's decryption mechanism
• If needed, contacting the threat actor for technical help with the decryptor tool

• Isolating affected endpoints and data stores to prevent further spread of the attack
• Making digital copies of every infected device and data store in order to perform forensics without interfering with recovery
• Installing anti-virus protection to all clean endpoints
• Recovering data from air-gapped backups or unscathed machines
• Building a clean recovery environment
• Mapping and connecting drives to reflect precisely their pre-encryption state

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor often attempt to exfiltrate information. TAs can then demand an additional ransom in exchange for not posting this data or selling it. Sadly, there is no way to be certain that stolen files have been totally deleted by the hacker. In fact, in numerous cases the threat actor has little control about data custody. Settling an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy attorneys, conducting an inventory of files were taken, and performing the necessary notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite IT services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded advanced certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned prestigious certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial management and ERP application software. This breadth of expertise allows Progent to salvage and integrate the surviving pieces of your network after a ransomware assault and reconstruct them rapidly into an operational system. Progent has worked with top insurance providers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Detroit
To get in touch with Progent about ransomware settlement negotiation guidance in Detroit, call Progent at 800-462-8800 or go to Contact Progent.