Ransomware Response Consultants

Progent's Ransomware Negotiation Services in Hialeah
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that calls for a combination of real-word experience, IT knowledge and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Because the number one priority of the ransomware victim is fast recovery, it is vital to establish response teams that operate efficiently, concurrently, and with intimate collaboration. Progent offers the scope of IT skills and the depth of personnel to complement your network support team and recover your network rapidly and affordably.

Services provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware used in the attack
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Testing the threat actor's decryption tool
• Determining a settlement range with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and timeline with the threat actor
• Checking compliance with anti-money laundering (AML) laws
• Overseeing the crypto-currency payment to the hacker
• Receiving, reviewing, and using the TA's decryptor utility
• If necessary, contacting the hacker for technical help with the decryption tool

• Quarantining affected endpoints and data stores to arrest the spread of the attack
• Making digital copies of each breached server and endpoint and data store in order to perform forensics without interfering with restoration
• Installing A/V agents to all virus-free endpoints
• Salvaging files from offline restores or unscathed machines
• Creating a pristine environment
• Mapping and reconnecting datastores to reflect precisely their pre-attack condition

Settling Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern strains of ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") files. Hackers can then require a separate settlement for not divulging this data or selling it. Unfortunately, there exists no way to prove that stolen data have been completely erased by the TA. Actually, in numerous cases the hacker has limited control about who can access the stolen files. Paying an exfiltration ransom does not free you from the need for getting the advice of privacy attorneys, performing an audit on which files were compromised, and performing the necessary notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite IT services across the U.S. for more than 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have earned high-level certifications in core technologies such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial and ERP application software. This broad array of expertise gives Progent the ability to identify and consolidate the surviving pieces of your network after a ransomware assault and reconstruct them quickly into an operational system. Progent has collaborated with leading cyber insurance providers like Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Hialeah
To get in touch with Progent about crypto-ransomware settlement guidance in Hialeah, call Progent at 800-462-8800 or go to Contact Progent.