Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Consulting in Virginia Beach
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that requires a mix of real-word experience, technical knowledge and business savvy. It also calls for close co-operation with the cyber-extortion target's IT staff and the cyber insurance carrier, if any. Because the number one goal of the ransomware target is fast recovery, it is vital to establish recovery teams that operate efficiently, in parallel, and in close communication. Progent has the scope of IT skills and the deep bench of experts to supplement your network staff and restore your network environment rapidly and affordably.

Support provided by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware involved in the assault
• making contact with the hacker persona
• Evaluating the recovery risk
• Testing the TA's decryption tool
• Deciding on an acceptable settlement with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the TA
• Verifying accordance with anti-money laundering sanctions
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, learning, and operating the hacker's decryption tool
• If necessary, contacting the threat actor for technical assistance with the decryptor utility

• Isolating infected endpoints and data stores to arrest the spread of the attack
• Creating digital copies of each breached server and endpoint and data store to allow forensics without interfering with recovery
• Adding A/V protection to all clean endpoints
• Restoring files from air-gapped backups or uncompromised machines
• Building a pristine recovery environment
• Remapping and connecting datastores to reflect exactly their pre-attack condition

Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current variants of ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to steal (or "exfiltrate") information. TAs can then require an extra ransom for not posting this information on the dark web. Unfortunately, there is no method to prove that stolen files have been completely erased by the TA. In fact, in many cases the TA has limited control about who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of engaging the advice of legal counsel, performing an investigation into which data were taken, and sending the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services across the U.S. for more than two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have earned advanced certifications in foundation technologies such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned prestigious certifications including CISA, CISSP-ISSAP, and GIAC. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning applications. This broad array of expertise gives Progent the ability to salvage and integrate the undamaged parts of your information system after a ransomware attack and reconstruct them rapidly into a functioning network. Progent has worked with leading insurance carriers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Virginia Beach
To contact with Progent about crypto-ransomware settlement services in Virginia Beach, phone Progent at 800-462-8800 or go to Contact Progent.