Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Services in Alexandria
Progent has experience negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complex exercise that calls for a combination of field experience, technical knowledge and business acumen. It also demands working closely with the victim's IT staff and the insurance provider, if any. Because the number one priority of the ransomware victim is fast recovery, it is vital to establish response teams that operate effectively, in parallel, and with intimate collaboration. Progent offers the scope of technical skills and the deep bench of experts to complement your IT support team and recover your network environment quickly and economically.

Services available from Progent's ransomware negotiation team include:

• Determining the kind of ransomware used in the attack
• making contact with the hacker persona
• Evaluating the likelihood of recovery
• Validating the threat actor's decryption tool
• Budgeting a settlement with the victim and the cyber insurance provider
• Negotiating a settlement amount and timeline with the hacker
• Checking adherence to anti-money laundering sanctions
• Managing the crypto-currency payment to the hacker
• Acquiring, learning, and using the hacker's decryptor mechanism
• If needed, contacting the hacker for technical help with the decryption utility

• Quarantining infected endpoints to prevent further spread of the attack
• Creating replicas of every compromised server and endpoint and data store in order to perform forensics without interfering with restoration
• Installing anti-virus agents to all clean endpoints
• Restoring files from air-gapped restores or uncompromised endpoints
• Building a pristine recovery environment
• Remapping and reconnecting datastores to match precisely their pre-attack condition

Exfiltration Ransoms
In addition to demanding payment for a decryption tool, current variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") files. TAs are then able to demand an extra ransom for not posting this data on the dark web. Unfortunately, there is no method to prove that exfiltrated files have been completely erased by the threat actor. Actually, in many cases the threat actor has little control about the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of seeking the advice of privacy attorneys, performing an investigation into which files were compromised, and sending the mandated alerts to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and onsite network services throughout the United States for over 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have been awarded high-level certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, and GIAC. (See certifications earned by Progent consultants). Progent also has guidance in financial and Enterprise Resource Planning applications. This broad array of skills allows Progent to salvage and integrate the undamaged pieces of your IT environment following a ransomware assault and rebuild them quickly into a viable network. Progent has collaborated with leading cyber insurance carriers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Alexandria
To contact with Progent about crypto-ransomware settlement guidance in Alexandria, call Progent at 800-462-8800 or go to Contact Progent.