Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in Savannah
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated exercise that calls for a combination of field experience, technical skills and business savvy. It also requires close co-operation with the cyber-extortion target's IT team and the cyber insurance carrier, if there is one. Since the number one priority of the ransomware target is operational continuity, it is vital to deploy response groups that operate effectively, in parallel, and in close communication. Progent offers the scope of IT knowledge and the depth of experts to complement your network support team and restore your network rapidly and economically.

Support offered by Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the assault
• identifying and contacting the hacker
• Assessing the recovery risk
• Verifying the threat actor's decryption tool
• Budgeting a settlement with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and schedule with the threat actor
• Checking accordance with anti-money laundering regulations
• Carrying out the crypto-currency disbursement to the TA
• Receiving, learning, and operating the TA's decryptor utility
• If needed, contacting the hacker for assistance with the decryptor tool

• Quarantining infected endpoints to prevent further progress of the attack
• Creating replicas of every breached server and endpoint and data store to allow forensics without interfering with restoration
• Adding A/V protection to all virus-free endpoints
• Restoring files from offline backups or unscathed machines
• Building a clean environment
• Mapping and connecting datastores to match precisely their pre-encryption condition

Paying Exfiltration Ransoms
In addition to extorting money for a decryption utility, current strains of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to exfiltrate information. Hackers are then able to demand a separate ransom in exchange for not divulging this data or selling it. Unfortunately, there is no way to prove that stolen files have been totally deleted by the hacker. Actually, in numerous instances the TA has limited control about data custody. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy attorneys, performing an inventory of files were compromised, and sending the mandated notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services across the United States for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned high-level certifications in core technologies including Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP application software. This scope of skills allows Progent to salvage and consolidate the undamaged parts of your network after a ransomware assault and reconstruct them rapidly into an operational system. Progent has worked with top insurance carriers like Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Savannah
To contact with Progent about crypto-ransomware settlement expertise in Savannah, call Progent at 800-993-9400 or go to Contact Progent.