Ransomware Solutions Consulting Experts

Progent's Ransomware Settlement Negotiation Consulting in Madison
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex activity that calls for a combination of field experience, technical skills and business savvy. It also demands working closely with the victim's IT team and the cyber insurance provider, if any. Since the top goal of the ransomware victim is operational continuity, it is critical to deploy response groups that work efficiently, concurrently, and in close communication. Progent offers the breadth of technical skills and the depth of experts to complement your network staff and restore your network quickly and economically.

Support offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Assessing the recovery risk
• Verifying the threat actor's decryption tool
• Agreeing on a settlement amount with the victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the hacker
• Checking compliance with anti-money laundering regulations
• Overseeing the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the hacker's decryption tool
• If needed, contacting the TA for assistance with the decryption utility

• Isolating infected endpoints to arrest the progress of the attack
• Creating digital copies of each breached server and endpoint and data store to allow forensics without interfering with restoration
• Installing A/V protection to all clean endpoints
• Recovering data from air-gapped restores or unscathed endpoints
• Building a clean recovery environment
• Remapping and connecting drives to reflect precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") files. Hackers are then able to demand an extra payment for not publishing this information on the dark web. Sadly, there exists no way to prove that exfiltrated data have been completely erased by the threat actor. In fact, in numerous instances the threat actor has little say about where the information ends up. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy attorneys, performing an investigation into which data were taken, and sending the required alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and on-premises network services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned high-level certifications in foundation technologies including Cisco infrastructure, VMware, and popular Linux distros. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP application software. This scope of skills allows Progent to identify and integrate the undamaged parts of your network after a ransomware intrusion and reconstruct them quickly into an operational system. Progent has worked with top cyber insurance carriers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Madison
To contact with Progent about ransomware settlement expertise in Madison, call Progent at 800-462-8800 or go to Contact Progent.