Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Atlanta
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated exercise that requires a combination of field experience, IT skills and business savvy. It also demands working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware target is fast recovery, it is vital to deploy response groups that work effectively, in parallel, and in close communication. Progent has the breadth of technical knowledge and the deep bench of experts to complement your network staff and recover your network environment quickly and economically.

Support provided by Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware used in the attack
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Budgeting a settlement with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying accordance with anti-money laundering (AML) regulations
• Carrying out the crypto-currency transfer to the TA
• Acquiring, learning, and using the threat actor's decryptor utility
• If necessary, contacting the TA for technical assistance with the decryption utility

• Isolating affected endpoints to prevent further spread of the assault
• Making replicas of every breached server and endpoint and data store to allow forensics in parallel with restoration
• Adding A/V protection to all clean endpoints
• Salvaging files from air-gapped backups or unscathed machines
• Building a clean environment
• Mapping and connecting drives to reflect precisely their pre-attack state

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") files. Hackers are then able to require a separate settlement for not divulging this information on the dark web. Unfortunately, there exists no method to guarantee that stolen files have been completely erased by the hacker. Actually, in numerous instances the hacker has limited control over who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of getting the advice of privacy attorneys, conducting an investigation into which data were stolen, and sending the required notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services across the United States for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial management and Enterprise Resource Planning software. This scope of skills allows Progent to salvage and integrate the undamaged pieces of your information system following a ransomware intrusion and rebuild them quickly into a viable system. Progent has collaborated with leading cyber insurance carriers like Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Atlanta
To contact with Progent about crypto-ransomware settlement guidance in Atlanta, call Progent at 800-462-8800 or go to Contact Progent.