Ransomware Response Services

Overview of Progent's Ransomware Negotiation Services in Alexandria
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated exercise that calls for a mix of real-word experience, IT skills and business savvy. It also demands working closely with the ransomware victim's IT team and the insurance carrier, if there is one. Because the number one priority of the ransomware target is operational continuity, it is critical to deploy response groups that operate effectively, in parallel, and with intimate collaboration. Progent has the breadth of technical knowledge and the deep bench of experts to complement your network staff and recover your network environment quickly and economically.

Services available from Progent's ransomware settlement experts include:

• Determining the kind of ransomware used in the assault
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Validating the hacker's decryption capabilities
• Agreeing on a settlement range with the victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the hacker
• Checking adherence to anti-money laundering sanctions
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, learning, and operating the TA's decryption mechanism
• If needed, contacting the TA for assistance with the decryption tool

• Isolating infected endpoints to prevent further progress of the assault
• Making digital copies of every breached server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing anti-virus agents to all clean endpoints
• Restoring files from offline restores or uncompromised endpoints
• Building a clean recovery environment
• Mapping and reconnecting datastores to reflect precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern variants of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly try to steal (or "exfiltrate") files. Hackers can then require a separate payment in exchange for not divulging this information or selling it. Unfortunately, there is no way to guarantee that exfiltrated data have been completely erased by the hacker. In fact, in many cases the TA has limited control over the disposition of the data. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of privacy lawyers, performing an inventory of data were taken, and carrying out the required alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises network services throughout the United States for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have been awarded advanced certifications in foundation technologies such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and ERP applications. This scope of expertise gives Progent the ability to salvage and integrate the surviving pieces of your information system following a ransomware intrusion and rebuild them quickly into a functioning system. Progent has worked with leading insurance carriers like Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Alexandria
To get in touch with Progent about crypto-ransomware settlement negotiation services in Alexandria, phone Progent at 800-462-8800 or go to Contact Progent.