Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Services in Jacksonville
Progent has experience negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex activity that requires a mix of field experience, IT skills and business savvy. It also calls for close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Because the top priority of the ransomware victim is fast recovery, it is vital to establish response groups that operate efficiently, in parallel, and in close communication. Progent has the breadth of technical knowledge and the deep bench of personnel to supplement your IT staff and restore your network quickly and affordably.

Services available from Progent's ransomware settlement team include:

• Determining the type of ransomware used in the assault
• Making contact with the hacker
• Evaluating the recovery risk
• Validating the TA's decryption tool
• Agreeing on a settlement amount with the ransomware victim and the insurance provider
• Establishing a settlement and timeline with the TA
• Verifying adherence to anti-money laundering sanctions
• Overseeing the crypto-currency disbursement to the TA
• Receiving, reviewing, and operating the threat actor's decryptor mechanism
• If needed, contacting the threat actor for assistance with the decryption utility

• Isolating infected endpoints and data stores to prevent further spread of the assault
• Making digital copies of every breached device and data store in order to perform forensics without interfering with restoration
• Adding A/V protection to all virus-free endpoints
• Salvaging files from offline restores or unscathed endpoints
• Building a clean recovery environment
• Remapping and reconnecting drives to reflect precisely their pre-encryption state

Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate information. TAs can then demand an additional ransom for not publishing this information or selling it. Sadly, there is no way to prove that stolen files have been completely deleted by the threat actor. Actually, in many cases the TA has little say over where the information ends up. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of privacy attorneys, conducting an inventory of data were taken, and carrying out the necessary alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services throughout the U.S. for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have been awarded advanced certifications in core technologies such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This breadth of skills gives Progent the ability to salvage and consolidate the undamaged pieces of your IT environment after a ransomware attack and reconstruct them rapidly into a viable system. Progent has collaborated with leading insurance carriers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Jacksonville
To get in touch with Progent about ransomware settlement negotiation guidance in Jacksonville, phone Progent at 800-462-8800 or go to Contact Progent.