Ransomware Response Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Springfield
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complicated exercise that requires a mix of field experience, technical knowledge and business savvy. It also requires working closely with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Since the top priority of the ransomware victim is fast recovery, it is vital to deploy recovery groups that operate effectively, in parallel, and with intimate collaboration. Progent has the breadth of IT skills and the depth of experts to complement your IT support team and recover your network quickly and affordably.

Support available from Progent's ransomware settlement team include:

• Determining the type of ransomware used in the attack
• Identifying and contacting the hacker
• Assessing the recovery risk
• Testing the TA's decryption tool
• Budgeting a settlement payment with the ransomware victim and the insurance provider
• Establishing a settlement and schedule with the threat actor
• Checking adherence to anti-money laundering (AML) regulations
• Overseeing the crypto-currency disbursement to the hacker
• Receiving, reviewing, and using the hacker's decryption utility
• If necessary, contacting the TA for assistance with the decryptor tool

• Isolating infected endpoints to prevent further progress of the assault
• Creating digital copies of each infected device and data store in order to perform forensics in parallel with cleanup
• Installing A/V agents to all virus-free endpoints
• Recovering files from offline restores or uncompromised endpoints
• Creating a clean environment
• Remapping and reconnecting drives to reflect precisely their pre-attack state

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often attempt to steal (or "exfiltrate") files. Hackers can then demand a separate ransom in exchange for not posting this information or selling it. Sadly, there is no method to prove that stolen files have been totally erased by the TA. Actually, in many instances the hacker has limited control about data custody. Settling an exfiltration ransom does not free you from the necessity of getting the advice of privacy lawyers, performing an inventory of data were taken, and sending the necessary notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and onsite IT services throughout the United States for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning software. This broad array of expertise gives Progent the ability to salvage and consolidate the surviving parts of your IT environment following a ransomware intrusion and rebuild them rapidly into a viable system. Progent has collaborated with leading cyber insurance carriers like Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Services in Springfield
To contact with Progent about crypto-ransomware settlement services in Springfield, phone Progent at 800-462-8800 or go to Contact Progent.