Ransomware Response Consulting Services

Progent's Ransomware Negotiation Consulting in Webster
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated activity that calls for a mix of real-word experience, technical knowledge and business acumen. It also requires close co-operation with the cyber-extortion target's IT staff and the insurance provider, if any. Because the number one goal of the ransomware victim is fast recovery, it is critical to establish response groups that operate efficiently, concurrently, and in close communication. Progent has the breadth of IT skills and the depth of personnel to supplement your IT support team and restore your network environment quickly and economically.

Services provided by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware used in the assault
• Identifying and contacting the hacker
• Assessing the recovery risk
• Validating the TA's decryption capabilities
• Determining a settlement amount with the ransomware victim and the insurance carrier
• Negotiating a settlement and schedule with the threat actor
• Verifying compliance with anti-money laundering laws
• Managing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and using the TA's decryptor utility
• If necessary, contacting the threat actor for assistance with the decryption tool

• Isolating affected endpoints to arrest the progress of the assault
• Creating replicas of each compromised device and data store in order to perform forensics without interfering with recovery
• Installing anti-virus agents to all virus-free endpoints
• Restoring files from air-gapped backups or uncompromised endpoints
• Building a pristine recovery environment
• Mapping and reconnecting datastores to match precisely their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption utility, modern variants of ransomware like Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate files. TAs can then require an additional payment for not divulging this information on the dark web. Unfortunately, there is no way to prove that stolen data have been completely deleted by the hacker. In fact, in numerous instances the TA has little say over data custody. Paying an exfiltration ransom does not free you from the need for engaging the guidance of privacy lawyers, conducting an audit on which data were taken, and performing the mandated alerts to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and on-premises network services across the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have earned advanced certifications in core technology platforms including Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP application software. This scope of skills gives Progent the ability to salvage and consolidate the undamaged parts of your information system following a ransomware assault and rebuild them rapidly into a viable system. Progent has collaborated with leading cyber insurance carriers like Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Webster
To get in touch with Progent about crypto-ransomware settlement expertise in Webster, call Progent at 800-462-8800 or go to Contact Progent.