Ransomware Response Consulting Services

Progent's Ransomware Negotiation Services in Hialeah
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated exercise that requires a mix of field experience, IT skills and business acumen. It also calls for working closely with the ransomware victim's IT staff and the insurance carrier, if there is one. Because the top priority of the ransomware target is operational continuity, it is vital to establish recovery groups that work effectively, in parallel, and with intimate collaboration. Progent offers the scope of technical skills and the depth of experts to complement your IT staff and recover your network environment rapidly and economically.

Support provided by Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the assault
• identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Testing the hacker's decryption capabilities
• Agreeing on a settlement payment with the victim and the insurance carrier
• Establishing a settlement and schedule with the threat actor
• Checking accordance with anti-money laundering laws
• Managing the crypto-currency disbursement to the hacker
• Acquiring, learning, and operating the TA's decryption mechanism
• If needed, contacting the threat actor for technical help with the decryption utility

• Quarantining affected endpoints to arrest the spread of the assault
• Making replicas of every infected device and data store in order to perform forensics in parallel with recovery
• Installing anti-virus protection to all clean endpoints
• Salvaging data from air-gapped backups or unscathed machines
• Creating a clean recovery environment
• Remapping and connecting datastores to match exactly their pre-encryption condition

Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern strains of ransomware like Ryuk, Maze, Netwalker, and Egregor commonly attempt to exfiltrate information. TAs are then able to require an additional ransom in exchange for not divulging this data on the dark web. Unfortunately, there is no way to guarantee that exfiltrated data have been totally erased by the threat actor. In fact, in many instances the hacker has little say over data custody. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, conducting an inventory of data were stolen, and performing the required notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and onsite IT services across the United States for over two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications including CISA, CISSP, and CRISC. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP software. This broad array of expertise allows Progent to identify and integrate the surviving pieces of your network following a ransomware assault and rebuild them rapidly into a functioning network. Progent has worked with top cyber insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Hialeah
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Hialeah, call Progent at 800-462-8800 or go to Contact Progent.