Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Chesapeake
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated activity that requires a combination of real-word experience, IT knowledge and business acumen. It also demands close co-operation with the cyber-extortion target's IT team and the cyber insurance carrier, if any. Since the top goal of the ransomware target is fast recovery, it is vital to deploy response teams that operate efficiently, concurrently, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of personnel to complement your network support team and restore your network quickly and economically.

Services available from Progent's ransomware negotiation team include:

• Determining the kind of ransomware involved in the assault
• identifying and contacting the hacker
• Assessing the likelihood of recovery
• Verifying the TA's decryption tool
• Agreeing on a settlement amount with the victim and the cyber insurance provider
• Establishing a settlement amount and timeline with the threat actor
• Confirming adherence to anti-money laundering laws
• Managing the crypto-currency disbursement to the TA
• Acquiring, learning, and using the hacker's decryptor mechanism
• If necessary, contacting the threat actor for technical help with the decryptor utility

• Quarantining infected endpoints to arrest the spread of the assault
• Creating digital copies of every infected server and endpoint and data store to allow forensics without interfering with recovery
• Installing anti-virus protection to all clean endpoints
• Restoring data from offline restores or unscathed endpoints
• Building a pristine environment
• Remapping and reconnecting datastores to reflect precisely their pre-attack condition

Exfiltration Ransoms
In addition to extorting payment for a decryption tool, modern strains of ransomware like Ryuk, Maze, Netwalker, and Egregor commonly try to exfiltrate information. TAs are then able to require a separate payment for not posting this information or selling it. Unfortunately, there is no way to be certain that stolen files have been totally erased by the TA. Actually, in numerous cases the hacker has little say about who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for engaging the advice of privacy attorneys, conducting an investigation into which data were compromised, and sending the required alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises IT services throughout the United States for more than 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned advanced certifications in core technology platforms such as Cisco networking, VMware virtualization, and major Linux distros. Progent's data security experts have earned prestigious certifications such as CISA, CISSP-ISSAP, and CRISC. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP application software. This breadth of expertise allows Progent to identify and integrate the undamaged parts of your information system following a ransomware attack and rebuild them quickly into a functioning system. Progent has worked with leading insurance carriers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Chesapeake
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Chesapeake, phone Progent at 800-462-8800 or go to Contact Progent.