Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in West Palm Beach
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated exercise that requires a mix of real-word experience, technical skills and business savvy. It also calls for close co-operation with the victim's IT staff and the insurance carrier, if there is one. Since the top goal of the ransomware victim is operational continuity, it is vital to deploy response teams that operate effectively, in parallel, and in close communication. Progent has the breadth of IT knowledge and the depth of personnel to supplement your IT support team and restore your network environment quickly and economically.

Support available from Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the assault
• Identifying and contacting the hacker
• Assessing the likelihood of recovery
• Validating the threat actor's decryption tool
• Determining a settlement amount with the ransomware victim and the insurance provider
• Establishing a settlement amount and schedule with the TA
• Confirming compliance with anti-money laundering (AML) laws
• Carrying out the crypto-currency transfer to the hacker
• Acquiring, learning, and using the threat actor's decryption utility
• If needed, contacting the TA for technical help with the decryptor utility

• Isolating infected endpoints and data stores to arrest the progress of the attack
• Creating replicas of every breached server and endpoint and data store to allow forensics without interfering with cleanup
• Adding A/V protection to all clean endpoints
• Recovering files from offline backups or uncompromised endpoints
• Building a clean recovery environment
• Remapping and reconnecting datastores to match precisely their pre-attack condition

Settling Exfiltration Ransoms
Beyond extorting money for a decryption utility, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") files. Hackers can then demand a separate settlement in exchange for not divulging this information or selling it. Sadly, there is no method to guarantee that stolen data have been completely erased by the threat actor. In fact, in numerous instances the TA has little control over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for engaging the guidance of privacy lawyers, conducting an inventory of files were compromised, and sending the mandated notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises IT services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have earned high-level certifications in foundation technologies such as Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and ERP software. This broad array of expertise gives Progent the ability to identify and consolidate the surviving parts of your IT environment after a ransomware assault and rebuild them rapidly into an operational system. Progent has worked with leading insurance providers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in West Palm Beach
To get in touch with Progent about ransomware settlement negotiation guidance in West Palm Beach, call Progent at 800-462-8800 or go to Contact Progent.