Ransomware Solutions Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Arlington
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that requires a mix of real-word experience, IT knowledge and business savvy. It also demands working closely with the ransomware victim's IT staff and the cyber insurance carrier, if there is one. Because the top priority of the ransomware victim is operational continuity, it is critical to establish response groups that operate effectively, concurrently, and in close communication. Progent offers the breadth of technical knowledge and the depth of experts to complement your IT staff and restore your network rapidly and economically.

Services available from Progent's ransomware negotiation experts include:

• Establishing the type of ransomware used in the assault
• Making contact with the hacker persona
• Assessing the recovery risk
• Validating the hacker's decryption tool
• Determining a settlement payment with the victim and the insurance provider
• Establishing a settlement and schedule with the hacker
• Verifying adherence to anti-money laundering sanctions
• Managing the crypto-currency payment to the hacker
• Acquiring, learning, and operating the TA's decryption tool
• If necessary, contacting the hacker for technical help with the decryption tool

• Isolating infected endpoints and data stores to prevent further progress of the attack
• Creating replicas of each infected device and data store to allow forensics without interfering with recovery
• Installing A/V protection to all clean endpoints
• Salvaging files from offline backups or uncompromised endpoints
• Building a clean environment
• Remapping and reconnecting datastores to reflect exactly their pre-encryption state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to exfiltrate information. TAs can then demand a separate settlement for not publishing this data or selling it. Sadly, there exists no way to guarantee that stolen files have been totally erased by the threat actor. In fact, in many cases the TA has little say over where the information ends up. Paying an exfiltration ransom does not free you from the necessity of engaging the guidance of privacy attorneys, conducting an inventory of files were taken, and sending the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services throughout the United States for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in foundation technology platforms including Cisco infrastructure, VMware, and popular Linux distros. Progent's cybersecurity experts have earned prestigious certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This breadth of skills gives Progent the ability to salvage and consolidate the surviving parts of your information system after a ransomware intrusion and reconstruct them quickly into a viable network. Progent has worked with leading cyber insurance carriers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Arlington
To contact with Progent about crypto-ransomware settlement guidance in Arlington, call Progent at 800-462-8800 or go to Contact Progent.