Ransomware Solutions Consultants

Progent's Ransomware Settlement Negotiation Consulting in Savannah
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complicated exercise that calls for a combination of field experience, technical skills and business acumen. It also calls for close co-operation with the ransomware victim's IT team and the cyber insurance provider, if any. Since the number one goal of the ransomware target is operational continuity, it is vital to establish response teams that operate efficiently, in parallel, and in close communication. Progent offers the scope of IT skills and the depth of experts to complement your IT support team and recover your network environment quickly and affordably.

Services provided by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware involved in the assault
• identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption tool
• Budgeting a settlement with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and timeline with the TA
• Verifying adherence to anti-money laundering (AML) regulations
• Managing the crypto-currency payment to the TA
• Receiving, reviewing, and using the threat actor's decryptor tool
• If necessary, contacting the hacker for technical assistance with the decryption tool

• Quarantining infected endpoints to arrest the spread of the attack
• Creating replicas of every infected server and endpoint and data store in order to perform forensics without interfering with cleanup
• Adding A/V agents to all virus-free endpoints
• Recovering data from air-gapped backups or uncompromised machines
• Creating a pristine recovery environment
• Mapping and connecting drives to match exactly their pre-attack state

Settling Exfiltration Ransoms
Beyond demanding money for a decryption utility, current strains of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") files. TAs can then demand a separate ransom for not posting this information on the dark web. Sadly, there is no way to guarantee that stolen files have been completely deleted by the hacker. Actually, in numerous cases the hacker has limited say over the disposition of the data. Paying an exfiltration ransom does not free you from the need for engaging the guidance of legal counsel, conducting an audit on which files were compromised, and performing the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and onsite IT services throughout the U.S. for over 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have been awarded high-level certifications in foundation technology platforms including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security experts have earned industry-recognized certifications such as CISM, CISSP, and GIAC. (See Progent's certifications). Progent also has top-tier support in financial management and ERP software. This scope of expertise allows Progent to salvage and consolidate the surviving parts of your information system following a ransomware attack and rebuild them rapidly into a viable network. Progent has worked with leading cyber insurance carriers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Savannah
To contact with Progent about crypto-ransomware settlement negotiation services in Savannah, phone Progent at 800-462-8800 or go to Contact Progent.