Ransomware Response Services

Progent's Ransomware Settlement Negotiation Services in Chesapeake
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated activity that requires a combination of field experience, technical knowledge and business savvy. It also demands working closely with the cyber-extortion target's IT team and the insurance carrier, if there is one. Since the number one goal of the ransomware victim is fast recovery, it is vital to establish response groups that work efficiently, concurrently, and in close communication. Progent offers the breadth of IT skills and the depth of personnel to supplement your network support team and recover your network rapidly and affordably.

Support provided by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware used in the assault
• Making contact with the hacker
• Assessing the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Verifying adherence to anti-money laundering regulations
• Overseeing the crypto-currency transfer to the TA
• Acquiring, learning, and using the hacker's decryption mechanism
• If necessary, contacting the threat actor for technical help with the decryptor tool

• Quarantining affected endpoints and data stores to arrest the progress of the attack
• Making replicas of each infected server and endpoint and data store to allow forensics without interfering with cleanup
• Installing A/V agents to all virus-free endpoints
• Recovering files from offline backups or unscathed machines
• Creating a clean recovery environment
• Remapping and connecting datastores to reflect exactly their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly try to steal (or "exfiltrate") files. TAs are then able to demand a separate payment in exchange for not posting this information on the dark web. Sadly, there exists no method to be certain that exfiltrated data have been completely deleted by the TA. Actually, in numerous instances the threat actor has little say over the disposition of the data. Settling an exfiltration ransom does not eliminate the need for engaging the advice of privacy attorneys, performing an audit on which data were taken, and sending the necessary notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises network services across the U.S. for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned high-level certifications in core technologies such as Cisco networking, VMware, and popular distributions of Linux. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This broad array of expertise gives Progent the ability to identify and consolidate the undamaged parts of your network following a ransomware assault and rebuild them quickly into a functioning system. Progent has worked with leading cyber insurance providers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Services in Chesapeake
To get in touch with Progent about ransomware settlement negotiation services in Chesapeake, call Progent at 800-462-8800 or go to Contact Progent.