Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Virginia Beach
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated exercise that calls for a mix of field experience, IT skills and business savvy. It also calls for close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if any. Because the top priority of the ransomware victim is fast recovery, it is critical to establish recovery groups that work efficiently, concurrently, and in close communication. Progent offers the scope of IT knowledge and the depth of experts to supplement your network support team and recover your network environment quickly and affordably.

Services offered by Progent's ransomware negotiation experts include:

• Determining the type of ransomware used in the attack
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Determining a settlement amount with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and timeline with the TA
• Confirming adherence to anti-money laundering regulations
• Overseeing the crypto-currency transfer to the TA
• Receiving, reviewing, and operating the hacker's decryption utility
• If necessary, contacting the TA for technical help with the decryption utility

• Quarantining infected endpoints and data stores to arrest the progress of the assault
• Making digital copies of every compromised server and endpoint and data store in order to perform forensics without interfering with recovery
• Installing A/V agents to all clean endpoints
• Recovering files from air-gapped backups or uncompromised endpoints
• Building a pristine environment
• Remapping and reconnecting drives to match exactly their pre-attack condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") information. Hackers can then require an extra payment for not divulging this data on the dark web. Sadly, there exists no method to guarantee that stolen files have been totally erased by the TA. Actually, in numerous cases the hacker has limited control over where the information ends up. Settling an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, performing an investigation into which data were taken, and sending the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises network services throughout the United States for more than two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned advanced certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned industry-recognized certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and ERP software. This broad array of skills gives Progent the ability to salvage and integrate the surviving parts of your information system after a ransomware assault and rebuild them rapidly into an operational network. Progent has worked with top cyber insurance providers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Virginia Beach
To get in touch with Progent about ransomware settlement guidance in Virginia Beach, phone Progent at 800-462-8800 or go to Contact Progent.