Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Charleston
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that calls for a combination of real-word experience, IT knowledge and business acumen. It also requires working closely with the victim's IT staff and the insurance provider, if any. Because the top goal of the ransomware target is fast recovery, it is vital to establish recovery groups that operate efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of technical skills and the depth of personnel to supplement your network staff and restore your network environment rapidly and economically.

Support offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Validating the TA's decryption capabilities
• Budgeting a settlement amount with the victim and the cyber insurance carrier
• Establishing a settlement and timeline with the TA
• Checking accordance with anti-money laundering laws
• Carrying out the crypto-currency payment to the hacker
• Acquiring, learning, and using the TA's decryption utility
• If necessary, contacting the threat actor for technical assistance with the decryptor utility

• Isolating affected endpoints and data stores to arrest the progress of the assault
• Creating replicas of every breached device and data store to allow forensics without interfering with recovery
• Adding anti-virus agents to all virus-free endpoints
• Restoring files from offline restores or uncompromised machines
• Building a pristine recovery environment
• Mapping and connecting drives to match precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, current variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") information. Hackers are then able to demand an extra settlement for not divulging this information on the dark web. Sadly, there is no way to be certain that exfiltrated data have been completely erased by the hacker. In fact, in numerous instances the TA has limited say over who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy lawyers, conducting an inventory of files were taken, and performing the necessary alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the U.S. for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned advanced certifications in foundation technologies including Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial and ERP applications. This scope of expertise gives Progent the ability to identify and integrate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them rapidly into a functioning network. Progent has collaborated with leading insurance carriers like Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Charleston
To contact with Progent about ransomware settlement negotiation expertise in Charleston, phone Progent at 800-462-8800 or go to Contact Progent.