Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Chicago
Progent has experience negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex exercise that calls for a mix of real-word experience, IT skills and business savvy. It also demands close co-operation with the cyber-extortion target's IT team and the insurance carrier, if any. Because the top priority of the ransomware victim is fast recovery, it is critical to establish recovery groups that work effectively, in parallel, and in close communication. Progent offers the breadth of IT knowledge and the deep bench of personnel to complement your IT support team and restore your network environment quickly and economically.

Services available from Progent's ransomware settlement team include:

• Establishing the type of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Determining a settlement range with the victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the TA
• Checking accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the hacker
• Acquiring, learning, and using the threat actor's decryption tool
• If needed, contacting the hacker for technical help with the decryption tool

• Quarantining infected endpoints and data stores to prevent further progress of the assault
• Making digital copies of each infected device and data store to allow forensics in parallel with restoration
• Installing anti-virus agents to all clean endpoints
• Salvaging files from offline restores or uncompromised machines
• Creating a clean recovery environment
• Mapping and reconnecting datastores to match exactly their pre-encryption condition

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate files. TAs are then able to demand a separate ransom for not publishing this data or selling it. Sadly, there exists no method to prove that stolen data have been completely erased by the hacker. In fact, in numerous cases the hacker has limited control about who can access the stolen files. Settling an exfiltration ransom does not free you from the need for seeking the advice of legal counsel, conducting an investigation into which data were compromised, and sending the required notifications to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and on-premises network services throughout the U.S. for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technology platforms including Cisco infrastructure, VMware, and major Linux distros. Progent's data security experts have earned prestigious certifications including CISA, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning applications. This scope of skills gives Progent the ability to identify and integrate the surviving parts of your IT environment after a ransomware attack and reconstruct them quickly into an operational system. Progent has collaborated with leading insurance carriers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Chicago
To contact with Progent about crypto-ransomware settlement guidance in Chicago, call Progent at 800-462-8800 or go to Contact Progent.