Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Consulting in Charleston
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that requires a combination of real-word experience, IT knowledge and business acumen. It also calls for working closely with the cyber-extortion target's IT team and the insurance carrier, if there is one. Because the number one goal of the ransomware victim is fast recovery, it is vital to establish response groups that work effectively, in parallel, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of personnel to supplement your network staff and restore your network rapidly and economically.

Support offered by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware involved in the assault
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Testing the hacker's decryption tool
• Determining a settlement range with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying compliance with anti-money laundering regulations
• Overseeing the crypto-currency disbursement to the hacker
• Receiving, reviewing, and using the hacker's decryption utility
• If necessary, contacting the threat actor for technical help with the decryptor tool

• Isolating affected endpoints and data stores to prevent further spread of the assault
• Making replicas of every breached device and data store in order to perform forensics without interfering with restoration
• Adding anti-virus agents to all virus-free endpoints
• Salvaging files from air-gapped restores or uncompromised machines
• Building a clean environment
• Mapping and reconnecting datastores to reflect precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond demanding money for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to exfiltrate information. TAs are then able to demand an additional ransom in exchange for not publishing this data on the dark web. Unfortunately, there is no method to prove that exfiltrated files have been completely deleted by the threat actor. In fact, in many instances the hacker has limited control over where the information ends up. Settling an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, performing an investigation into which data were compromised, and performing the necessary notifications to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and on-premises network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in foundation technology platforms including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned industry-recognized certifications including CISM, CISSP, and GIAC. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning applications. This scope of expertise gives Progent the ability to salvage and consolidate the undamaged parts of your IT environment following a ransomware attack and reconstruct them rapidly into a viable network. Progent has worked with top cyber insurance carriers like Chubb to help organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Expertise in Charleston
To contact with Progent about ransomware settlement negotiation guidance in Charleston, call Progent at 800-462-8800 or go to Contact Progent.