Ransomware Response Consulting Experts

Progent's Ransomware Negotiation Services in Savannah
Progent has experience negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complex exercise that requires a combination of real-word experience, technical knowledge and business acumen. It also requires working closely with the victim's IT team and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware target is fast recovery, it is critical to establish response groups that work efficiently, in parallel, and with intimate collaboration. Progent offers the scope of technical skills and the depth of personnel to complement your network support team and restore your network environment quickly and economically.

Services offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• identifying and contacting the hacker
• Evaluating the recovery risk
• Testing the threat actor's decryption capabilities
• Deciding on an acceptable settlement with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the threat actor
• Confirming compliance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency payment to the hacker
• Acquiring, learning, and using the TA's decryption mechanism
• If necessary, contacting the threat actor for technical assistance with the decryptor tool

• Isolating infected endpoints to arrest the progress of the assault
• Making replicas of every breached device and data store in order to perform forensics without interfering with restoration
• Adding A/V agents to all clean endpoints
• Salvaging files from air-gapped backups or unscathed machines
• Building a clean recovery environment
• Remapping and connecting datastores to reflect precisely their pre-attack state

Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") files. TAs can then require an extra ransom for not publishing this information or selling it. Unfortunately, there exists no way to prove that stolen files have been completely erased by the TA. Actually, in numerous cases the hacker has limited say over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, conducting an audit on which data were stolen, and performing the required alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and on-premises IT services throughout the United States for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP-ISSAP, and GIAC. (See Progent's certifications). Progent also has top-tier support in financial management and Enterprise Resource Planning applications. This breadth of skills gives Progent the ability to identify and consolidate the undamaged pieces of your IT environment after a ransomware assault and reconstruct them rapidly into a viable system. Progent has collaborated with top cyber insurance providers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Services in Savannah
To contact with Progent about ransomware settlement services in Savannah, phone Progent at 800-462-8800 or go to Contact Progent.