Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Consulting in Durham
Progent is experienced in negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complicated activity that calls for a combination of real-word experience, IT skills and business acumen. It also calls for working closely with the victim's IT staff and the insurance carrier, if there is one. Since the top goal of the ransomware target is fast recovery, it is critical to deploy recovery groups that work efficiently, in parallel, and in close communication. Progent has the breadth of technical knowledge and the deep bench of experts to complement your network staff and restore your network rapidly and economically.

Support offered by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware used in the assault
• Making contact with the hacker persona
• Assessing the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Budgeting a settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement amount and timeline with the hacker
• Verifying accordance with anti-money laundering sanctions
• Overseeing the crypto-currency transfer to the hacker
• Receiving, learning, and using the TA's decryption mechanism
• If necessary, contacting the threat actor for technical assistance with the decryptor tool

• Isolating affected endpoints and data stores to prevent further progress of the attack
• Creating digital copies of every breached server and endpoint and data store to allow forensics in parallel with restoration
• Adding A/V protection to all virus-free endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Mapping and reconnecting drives to match exactly their pre-encryption condition

Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") information. TAs are then able to demand a separate payment in exchange for not divulging this information or selling it. Unfortunately, there exists no way to be certain that stolen files have been totally deleted by the TA. Actually, in many instances the hacker has little say about data custody. Settling an exfiltration ransom does not free you from the need for getting the advice of privacy attorneys, performing an investigation into which data were compromised, and performing the necessary alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and onsite network services across the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technology platforms including Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial and ERP applications. This scope of skills gives Progent the ability to salvage and consolidate the undamaged pieces of your information system after a ransomware attack and rebuild them quickly into a functioning network. Progent has collaborated with top cyber insurance providers like Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Services in Durham
To contact with Progent about ransomware settlement guidance in Durham, phone Progent at 800-462-8800 or go to Contact Progent.