Ransomware Response Services

Progent's Ransomware Settlement Negotiation Consulting in Bristol
Progent has experience negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that calls for a mix of real-word experience, IT skills and business savvy. It also requires working closely with the victim's IT team and the cyber insurance carrier, if any. Since the number one goal of the ransomware target is operational continuity, it is vital to establish recovery groups that work efficiently, in parallel, and in close communication. Progent has the breadth of IT skills and the depth of experts to complement your network staff and recover your network environment rapidly and economically.

Support provided by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware involved in the assault
• making contact with the hacker
• Evaluating the recovery risk
• Validating the hacker's decryption tool
• Agreeing on a settlement payment with the victim and the insurance carrier
• Negotiating a settlement and schedule with the threat actor
• Checking adherence to anti-money laundering sanctions
• Overseeing the crypto-currency transfer to the TA
• Acquiring, learning, and using the TA's decryption tool
• If needed, contacting the threat actor for assistance with the decryptor tool

• Quarantining affected endpoints and data stores to prevent further progress of the assault
• Making digital copies of every breached server and endpoint and data store in order to perform forensics in parallel with cleanup
• Adding A/V protection to all virus-free endpoints
• Salvaging files from air-gapped backups or unscathed endpoints
• Creating a pristine recovery environment
• Mapping and reconnecting drives to reflect precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption utility, current strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") files. Hackers can then require an additional settlement for not publishing this information on the dark web. Unfortunately, there is no method to prove that exfiltrated data have been totally erased by the hacker. In fact, in numerous instances the hacker has little say over data custody. Paying an exfiltration ransom does not free you from the need for getting the guidance of legal counsel, performing an investigation into which data were compromised, and performing the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and on-premises IT services across the U.S. for over 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SBEs) includes consultants who have earned high-level certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned prestigious certifications including CISA, CISSP, and GIAC. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP software. This broad array of expertise allows Progent to identify and consolidate the surviving parts of your network following a ransomware assault and reconstruct them quickly into a functioning network. Progent has worked with leading insurance carriers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Bristol
To get in touch with Progent about crypto-ransomware settlement expertise in Bristol, call Progent at 800-462-8800 or go to Contact Progent.