Ransomware Response Services

Progent's Ransomware Settlement Negotiation Services in Memphis
Progent has experience negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex exercise that calls for a combination of field experience, technical skills and business acumen. It also calls for close co-operation with the cyber-extortion target's IT staff and the insurance provider, if there is one. Because the top priority of the ransomware target is fast recovery, it is critical to establish recovery groups that operate efficiently, in parallel, and with intimate collaboration. Progent has the scope of technical knowledge and the deep bench of personnel to complement your network staff and restore your network quickly and affordably.

Services offered by Progent's ransomware settlement experts include:

• Establishing the kind of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Verifying the TA's decryption capabilities
• Determining a settlement range with the victim and the insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Confirming adherence to anti-money laundering regulations
• Managing the crypto-currency transfer to the TA
• Receiving, learning, and using the TA's decryption mechanism
• If needed, contacting the threat actor for technical help with the decryption tool

• Isolating infected endpoints and data stores to prevent further progress of the attack
• Making digital copies of every breached device and data store to allow forensics in parallel with restoration
• Adding A/V protection to all clean endpoints
• Recovering data from offline backups or uncompromised endpoints
• Creating a pristine recovery environment
• Remapping and reconnecting drives to reflect exactly their pre-attack condition

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to exfiltrate files. TAs are then able to require a separate ransom for not divulging this information on the dark web. Sadly, there is no way to guarantee that exfiltrated files have been totally erased by the hacker. In fact, in many cases the TA has limited control over who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of legal counsel, performing an inventory of data were stolen, and sending the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises IT services throughout the U.S. for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned high-level certifications in foundation technology platforms including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning software. This breadth of expertise allows Progent to identify and integrate the surviving pieces of your information system following a ransomware assault and rebuild them rapidly into a functioning network. Progent has worked with leading cyber insurance carriers like Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Memphis
To contact with Progent about crypto-ransomware settlement negotiation guidance in Memphis, call Progent at 800-462-8800 or go to Contact Progent.