Ransomware Solutions Services

Overview of Progent's Ransomware Settlement Negotiation Services in Chesapeake
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an acceptable settlement is a complicated exercise that calls for a combination of real-word experience, technical skills and business savvy. It also calls for close co-operation with the cyber-extortion target's IT team and the insurance carrier, if any. Since the number one goal of the ransomware target is operational continuity, it is vital to establish response groups that operate efficiently, concurrently, and in close communication. Progent offers the breadth of IT knowledge and the deep bench of personnel to complement your network staff and recover your network environment quickly and affordably.

Services offered by Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware used in the assault
• identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Validating the TA's decryption capabilities
• Budgeting a settlement range with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the TA
• Verifying compliance with anti-money laundering (AML) regulations
• Carrying out the crypto-currency disbursement to the hacker
• Receiving, learning, and operating the TA's decryption tool
• If needed, contacting the TA for technical help with the decryption utility

• Isolating infected endpoints and data stores to arrest the spread of the attack
• Creating digital copies of each infected server and endpoint and data store to allow forensics without interfering with recovery
• Installing A/V agents to all clean endpoints
• Recovering files from offline restores or unscathed machines
• Creating a clean environment
• Remapping and reconnecting drives to reflect exactly their pre-encryption condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") files. Hackers can then demand an extra payment in exchange for not divulging this information or selling it. Unfortunately, there is no way to be certain that stolen files have been completely erased by the hacker. In fact, in numerous instances the threat actor has little say about data custody. Settling an exfiltration ransom does not free you from the need for engaging the guidance of privacy lawyers, performing an inventory of data were taken, and carrying out the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and onsite IT services across the U.S. for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes consultants who have earned high-level certifications in core technologies including Cisco infrastructure, VMware, and major Linux distros. Progent's data security consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, and CRISC. (Refer to Progent's certifications). Progent also has guidance in financial management and ERP software. This scope of expertise allows Progent to salvage and consolidate the surviving parts of your IT environment following a ransomware intrusion and reconstruct them rapidly into a functioning network. Progent has worked with leading insurance providers including Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Chesapeake
To contact with Progent about crypto-ransomware settlement negotiation expertise in Chesapeake, call Progent at 800-462-8800 or go to Contact Progent.