Ransomware Response Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Virginia Beach
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated exercise that requires a combination of real-word experience, technical skills and business acumen. It also demands working closely with the cyber-extortion target's IT team and the insurance provider, if any. Because the top priority of the ransomware victim is operational continuity, it is vital to establish recovery teams that work effectively, in parallel, and with intimate collaboration. Progent has the scope of technical skills and the depth of experts to supplement your IT support team and restore your network environment quickly and economically.

Support available from Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware used in the attack
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Agreeing on a settlement with the victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Verifying accordance with anti-money laundering (AML) laws
• Overseeing the crypto-currency disbursement to the TA
• Receiving, reviewing, and operating the threat actor's decryptor utility
• If needed, contacting the TA for technical assistance with the decryptor utility

• Isolating affected endpoints to prevent further progress of the assault
• Creating replicas of each infected server and endpoint and data store to allow forensics in parallel with recovery
• Adding anti-virus protection to all clean endpoints
• Restoring files from air-gapped restores or uncompromised machines
• Building a clean recovery environment
• Mapping and reconnecting drives to reflect precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption tool, modern variants of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor commonly try to exfiltrate information. TAs are then able to demand an additional ransom for not divulging this data on the dark web. Sadly, there exists no way to prove that stolen files have been completely deleted by the hacker. In fact, in many cases the TA has little say about who can access the stolen files. Settling an exfiltration ransom does not free you from the need for seeking the advice of legal counsel, performing an investigation into which data were stolen, and performing the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and onsite IT services throughout the U.S. for more than 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have earned high-level certifications in foundation technologies such as Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial and ERP applications. This scope of expertise allows Progent to identify and integrate the undamaged pieces of your IT environment following a ransomware intrusion and reconstruct them quickly into a functioning network. Progent has worked with leading insurance providers like Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Virginia Beach
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Virginia Beach, call Progent at 800-462-8800 or go to Contact Progent.