Ransomware Response Services

Progent's Ransomware Negotiation Services in Charleston
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that requires a combination of real-word experience, technical skills and business savvy. It also demands close co-operation with the cyber-extortion target's IT team and the insurance provider, if there is one. Because the number one goal of the ransomware victim is operational continuity, it is critical to establish recovery teams that work effectively, in parallel, and with intimate collaboration. Progent has the scope of IT knowledge and the depth of personnel to supplement your IT staff and recover your network rapidly and affordably.

Services provided by Progent's ransomware settlement team include:

• Establishing the kind of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Deciding on an acceptable settlement payment with the victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the hacker
• Confirming adherence to anti-money laundering regulations
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the threat actor's decryptor mechanism
• If needed, contacting the TA for technical assistance with the decryption tool

• Isolating affected endpoints to prevent further progress of the assault
• Creating replicas of every compromised server and endpoint and data store to allow forensics without interfering with recovery
• Installing A/V protection to all virus-free endpoints
• Recovering data from air-gapped restores or unscathed machines
• Creating a pristine environment
• Mapping and reconnecting datastores to match precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current variants of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") information. Hackers are then able to demand a separate payment in exchange for not posting this data on the dark web. Unfortunately, there exists no way to guarantee that exfiltrated data have been totally erased by the TA. Actually, in many instances the hacker has little say about the disposition of the data. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of legal counsel, conducting an investigation into which data were compromised, and performing the necessary alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services throughout the U.S. for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in core technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP software. This broad array of skills gives Progent the ability to salvage and consolidate the surviving pieces of your information system following a ransomware assault and reconstruct them quickly into a functioning network. Progent has collaborated with leading cyber insurance carriers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Charleston
To contact with Progent about ransomware settlement guidance in Charleston, call Progent at 800-462-8800 or go to Contact Progent.