Ransomware Response Services

Overview of Progent's Ransomware Settlement Negotiation Services in Harrisburg
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complicated exercise that calls for a mix of field experience, technical knowledge and business acumen. It also demands close co-operation with the cyber-extortion target's IT team and the insurance carrier, if any. Because the number one priority of the ransomware victim is fast recovery, it is vital to establish response groups that operate effectively, in parallel, and in close communication. Progent offers the breadth of IT knowledge and the depth of experts to complement your IT staff and recover your network quickly and affordably.

Support provided by Progent's ransomware settlement experts include:

• Determining the kind of ransomware involved in the attack
• Making contact with the hacker
• Assessing the recovery risk
• Verifying the threat actor's decryption capabilities
• Agreeing on a settlement amount with the ransomware victim and the insurance provider
• Establishing a settlement and schedule with the threat actor
• Verifying adherence to anti-money laundering (AML) laws
• Managing the crypto-currency disbursement to the hacker
• Receiving, reviewing, and using the TA's decryptor tool
• If necessary, contacting the threat actor for technical assistance with the decryptor tool

• Isolating affected endpoints to arrest the spread of the assault
• Creating replicas of every breached device and data store in order to perform forensics in parallel with recovery
• Adding anti-virus agents to all clean endpoints
• Salvaging files from air-gapped backups or unscathed endpoints
• Creating a pristine recovery environment
• Remapping and connecting drives to reflect exactly their pre-attack state

Settling Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern variants of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often attempt to steal (or "exfiltrate") information. Hackers are then able to demand an additional ransom for not publishing this data on the dark web. Unfortunately, there exists no method to guarantee that stolen files have been totally erased by the TA. Actually, in many cases the hacker has limited say over the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of seeking the guidance of legal counsel, performing an inventory of data were compromised, and carrying out the necessary notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and on-premises network services throughout the U.S. for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in core technologies including Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This breadth of skills gives Progent the ability to salvage and integrate the surviving parts of your information system following a ransomware assault and rebuild them rapidly into a functioning network. Progent has collaborated with top cyber insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Harrisburg
To get in touch with Progent about ransomware settlement services in Harrisburg, phone Progent at 800-462-8800 or go to Contact Progent.