Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in Jacksonville
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated exercise that calls for a mix of field experience, technical skills and business savvy. It also calls for working closely with the cyber-extortion target's IT team and the cyber insurance carrier, if any. Since the number one priority of the ransomware victim is operational continuity, it is vital to deploy response groups that operate effectively, in parallel, and in close communication. Progent has the scope of IT skills and the depth of experts to supplement your network staff and recover your network rapidly and economically.

Services available from Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the assault
• identifying and contacting the hacker
• Assessing the recovery risk
• Validating the hacker's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the insurance carrier
• Negotiating a settlement and timeline with the hacker
• Verifying compliance with anti-money laundering laws
• Carrying out the crypto-currency transfer to the hacker
• Receiving, learning, and using the threat actor's decryption mechanism
• If needed, contacting the hacker for technical help with the decryption utility

• Quarantining infected endpoints to prevent further progress of the assault
• Creating replicas of every breached server and endpoint and data store to allow forensics without interfering with restoration
• Installing A/V agents to all virus-free endpoints
• Restoring files from air-gapped backups or unscathed endpoints
• Creating a clean environment
• Mapping and reconnecting drives to reflect precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to steal (or "exfiltrate") information. Hackers can then require a separate settlement for not divulging this data or selling it. Sadly, there exists no method to guarantee that exfiltrated files have been totally erased by the threat actor. Actually, in numerous instances the hacker has little say over who can access the stolen files. Settling an exfiltration ransom does not eliminate the need for engaging the advice of privacy attorneys, performing an investigation into which files were compromised, and performing the required notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises IT services throughout the U.S. for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have been awarded high-level certifications in foundation technology platforms such as Cisco networking, VMware, and popular distributions of Linux. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP, and GIAC. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning application software. This scope of skills gives Progent the ability to salvage and consolidate the undamaged parts of your IT environment after a ransomware intrusion and rebuild them rapidly into an operational network. Progent has worked with top cyber insurance providers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Jacksonville
To contact with Progent about ransomware settlement negotiation guidance in Jacksonville, call Progent at 800-462-8800 or go to Contact Progent.