Ransomware Response Services

Overview of Progent's Ransomware Negotiation Consulting in Clearwater
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that requires a combination of real-word experience, technical knowledge and business acumen. It also demands working closely with the cyber-extortion target's IT staff and the cyber insurance provider, if any. Since the number one priority of the ransomware target is fast recovery, it is critical to establish recovery teams that operate efficiently, concurrently, and in close communication. Progent has the scope of IT knowledge and the deep bench of personnel to supplement your IT support team and restore your network quickly and affordably.

Services available from Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the assault
• making contact with the hacker persona
• Assessing the recovery risk
• Verifying the TA's decryption tool
• Determining a settlement with the victim and the cyber insurance provider
• Negotiating a settlement amount and timeline with the TA
• Verifying adherence to anti-money laundering (AML) laws
• Overseeing the crypto-currency transfer to the hacker
• Receiving, learning, and operating the hacker's decryptor utility
• If necessary, contacting the threat actor for assistance with the decryptor utility

• Quarantining affected endpoints and data stores to prevent further progress of the attack
• Creating digital copies of every infected device and data store in order to perform forensics in parallel with restoration
• Installing A/V protection to all clean endpoints
• Recovering data from air-gapped restores or unscathed endpoints
• Building a clean recovery environment
• Mapping and reconnecting drives to reflect exactly their pre-attack state

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern strains of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly try to exfiltrate information. Hackers can then demand an additional payment in exchange for not publishing this information or selling it. Unfortunately, there is no method to guarantee that exfiltrated files have been completely erased by the TA. Actually, in many instances the hacker has limited say about data custody. Paying an exfiltration ransom does not free you from the necessity of engaging the guidance of legal counsel, conducting an investigation into which files were compromised, and performing the required alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and on-premises IT services throughout the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, and CRISC. (Refer to Progent's certifications). Progent also has top-tier support in financial management and Enterprise Resource Planning applications. This broad array of expertise gives Progent the ability to salvage and integrate the surviving pieces of your network following a ransomware attack and rebuild them rapidly into a functioning network. Progent has collaborated with top insurance providers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Services in Clearwater
To contact with Progent about crypto-ransomware settlement services in Clearwater, call Progent at 800-462-8800 or go to Contact Progent.