Ransomware Response Services

Overview of Progent's Ransomware Settlement Negotiation Services in Appleton
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex activity that calls for a mix of real-word experience, IT skills and business acumen. It also requires close co-operation with the ransomware victim's IT team and the insurance carrier, if any. Because the top priority of the ransomware target is fast recovery, it is vital to establish response groups that work efficiently, concurrently, and in close communication. Progent offers the scope of technical knowledge and the deep bench of personnel to complement your IT support team and restore your network quickly and affordably.

Services provided by Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the assault
• Making contact with the hacker
• Assessing the likelihood of recovery
• Validating the hacker's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the insurance carrier
• Negotiating a settlement and schedule with the hacker
• Checking adherence to anti-money laundering laws
• Carrying out the crypto-currency payment to the TA
• Acquiring, reviewing, and using the TA's decryption tool
• If needed, contacting the threat actor for technical help with the decryption tool

• Quarantining affected endpoints to prevent further spread of the attack
• Creating digital copies of each compromised device and data store to allow forensics in parallel with restoration
• Installing anti-virus protection to all virus-free endpoints
• Restoring data from air-gapped backups or unscathed endpoints
• Building a pristine recovery environment
• Remapping and connecting drives to reflect exactly their pre-attack condition

Paying Exfiltration Ransoms
In addition to extorting money for a decryption utility, current variants of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") information. Hackers are then able to demand a separate ransom for not publishing this data or selling it. Unfortunately, there exists no way to prove that stolen files have been completely deleted by the hacker. In fact, in numerous instances the hacker has little control about the disposition of the data. Settling an exfiltration ransom does not free you from the need for engaging the advice of legal counsel, conducting an investigation into which files were compromised, and carrying out the necessary notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and on-premises IT services across the United States for over 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned advanced certifications in foundation technology platforms including Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP software. This breadth of skills allows Progent to salvage and consolidate the surviving pieces of your network after a ransomware assault and rebuild them quickly into a functioning system. Progent has worked with leading insurance providers including Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Appleton
To contact with Progent about ransomware settlement negotiation guidance in Appleton, phone Progent at 800-462-8800 or go to Contact Progent.