Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Consulting in Lincoln
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that calls for a mix of real-word experience, IT knowledge and business acumen. It also requires close co-operation with the ransomware victim's IT staff and the insurance carrier, if there is one. Because the top priority of the ransomware victim is fast recovery, it is vital to establish response groups that work efficiently, in parallel, and in close communication. Progent offers the scope of technical skills and the depth of personnel to complement your network staff and recover your network quickly and affordably.

Support available from Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Verifying the TA's decryption tool
• Determining a settlement range with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and schedule with the TA
• Verifying compliance with anti-money laundering (AML) sanctions
• Managing the crypto-currency transfer to the TA
• Receiving, learning, and using the hacker's decryptor mechanism
• If needed, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining affected endpoints to arrest the progress of the attack
• Making replicas of every breached device and data store to allow forensics without interfering with restoration
• Adding A/V agents to all clean endpoints
• Salvaging files from air-gapped backups or uncompromised endpoints
• Building a pristine recovery environment
• Mapping and reconnecting drives to match exactly their pre-encryption state

Exfiltration Ransoms
Beyond demanding payment for a decryption utility, current strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate files. TAs can then require a separate payment for not publishing this information or selling it. Unfortunately, there is no method to guarantee that exfiltrated data have been completely deleted by the TA. In fact, in many instances the TA has limited control over the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of engaging the advice of privacy lawyers, conducting an inventory of data were compromised, and performing the necessary alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises IT services across the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned industry-recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning software. This breadth of expertise allows Progent to identify and consolidate the surviving pieces of your information system after a ransomware assault and reconstruct them rapidly into a functioning system. Progent has collaborated with leading insurance providers including Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Lincoln
To get in touch with Progent about ransomware settlement negotiation services in Lincoln, phone Progent at 800-462-8800 or go to Contact Progent.