Ransomware Response Services

Overview of Progent's Ransomware Negotiation Consulting in Charleston
Progent has experience negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex exercise that calls for a mix of real-word experience, IT skills and business acumen. It also calls for working closely with the victim's IT team and the cyber insurance carrier, if there is one. Because the top priority of the ransomware target is operational continuity, it is critical to establish response groups that work efficiently, in parallel, and in close communication. Progent has the scope of IT skills and the deep bench of personnel to complement your IT support team and restore your network environment quickly and affordably.

Support provided by Progent's ransomware settlement negotiation experts include:

• Establishing the kind of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Testing the hacker's decryption capabilities
• Agreeing on a settlement with the victim and the insurance provider
• Negotiating a settlement and timeline with the threat actor
• Checking compliance with anti-money laundering (AML) regulations
• Managing the crypto-currency transfer to the TA
• Receiving, learning, and using the TA's decryption tool
• If needed, contacting the hacker for assistance with the decryption utility

• Isolating affected endpoints to prevent further progress of the assault
• Creating replicas of each breached device and data store in order to perform forensics without interfering with cleanup
• Adding anti-virus protection to all virus-free endpoints
• Restoring data from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Mapping and connecting drives to match precisely their pre-attack state

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current variants of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") files. TAs can then require an extra payment for not divulging this data or selling it. Sadly, there is no way to be certain that stolen files have been completely deleted by the hacker. In fact, in numerous cases the TA has little say over data custody. Settling an exfiltration ransom does not eliminate the necessity of seeking the guidance of privacy attorneys, conducting an audit on which files were stolen, and carrying out the mandated notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite IT services across the U.S. for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in foundation technologies such as Cisco infrastructure, VMware, and popular Linux distros. Progent's data security consultants have earned prestigious certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP software. This broad array of skills allows Progent to salvage and integrate the surviving pieces of your IT environment after a ransomware attack and rebuild them quickly into a functioning network. Progent has collaborated with top cyber insurance providers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Charleston
To contact with Progent about ransomware settlement expertise in Charleston, phone Progent at 800-462-8800 or go to Contact Progent.