Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in Charleston
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an acceptable settlement is a complicated activity that calls for a mix of real-word experience, IT knowledge and business savvy. It also calls for working closely with the ransomware victim's IT team and the insurance carrier, if there is one. Because the number one priority of the ransomware target is operational continuity, it is vital to deploy response teams that work efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of IT skills and the deep bench of personnel to complement your network support team and restore your network environment quickly and economically.

Support provided by Progent's ransomware negotiation team include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Validating the threat actor's decryption tool
• Determining a settlement payment with the victim and the insurance carrier
• Establishing a settlement and timeline with the TA
• Checking accordance with anti-money laundering sanctions
• Carrying out the crypto-currency payment to the TA
• Receiving, learning, and operating the hacker's decryptor mechanism
• If needed, contacting the threat actor for assistance with the decryptor utility

• Isolating affected endpoints to arrest the spread of the attack
• Making replicas of every compromised device and data store in order to perform forensics in parallel with cleanup
• Adding anti-virus agents to all virus-free endpoints
• Recovering data from air-gapped restores or uncompromised endpoints
• Creating a clean recovery environment
• Remapping and reconnecting drives to reflect exactly their pre-attack condition

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current strains of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate information. Hackers are then able to require an extra ransom for not divulging this data or selling it. Unfortunately, there exists no way to be certain that exfiltrated files have been completely deleted by the hacker. Actually, in many cases the threat actor has limited say about data custody. Paying an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy attorneys, performing an audit on which files were compromised, and performing the required alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite IT services throughout the United States for over 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have earned advanced certifications in core technology platforms such as Cisco infrastructure, VMware, and major Linux distros. Progent's data security consultants have earned prestigious certifications including CISM, CISSP-ISSAP, and CRISC. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and ERP software. This scope of skills allows Progent to salvage and consolidate the surviving pieces of your network following a ransomware attack and rebuild them quickly into a functioning system. Progent has collaborated with leading insurance providers like Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Charleston
To get in touch with Progent about ransomware settlement expertise in Charleston, phone Progent at 800-462-8800 or go to Contact Progent.