Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Lima
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that requires a combination of real-word experience, technical skills and business savvy. It also demands working closely with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Since the top goal of the ransomware victim is operational continuity, it is critical to deploy recovery groups that work efficiently, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the depth of personnel to complement your IT staff and recover your network quickly and affordably.

Support offered by Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware involved in the attack
• Making contact with the hacker
• Evaluating the recovery risk
• Testing the threat actor's decryption capabilities
• Budgeting a settlement payment with the ransomware victim and the insurance provider
• Negotiating a settlement amount and timeline with the TA
• Verifying compliance with anti-money laundering regulations
• Carrying out the crypto-currency transfer to the TA
• Receiving, reviewing, and using the threat actor's decryption utility
• If needed, contacting the threat actor for technical assistance with the decryption tool

• Quarantining affected endpoints to arrest the progress of the attack
• Making replicas of each infected device and data store in order to perform forensics without interfering with cleanup
• Adding A/V protection to all clean endpoints
• Salvaging data from offline restores or unscathed machines
• Building a clean environment
• Remapping and reconnecting datastores to match exactly their pre-attack condition

Exfiltration Ransoms
Beyond demanding money for a decryption tool, current strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") information. TAs are then able to require an additional ransom for not divulging this data or selling it. Sadly, there exists no way to be certain that exfiltrated data have been totally deleted by the TA. In fact, in numerous instances the threat actor has little say about the disposition of the data. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, conducting an inventory of data were stolen, and performing the mandated alerts to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and onsite network services across the United States for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded high-level certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial and ERP application software. This broad array of expertise gives Progent the ability to salvage and consolidate the undamaged parts of your information system after a ransomware intrusion and reconstruct them rapidly into a functioning network. Progent has worked with top insurance providers like Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Lima
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Lima, phone Progent at 800-462-8800 or go to Contact Progent.