Ransomware Response Services

Overview of Progent's Ransomware Negotiation Consulting in Appleton
Progent has experience negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex exercise that calls for a combination of field experience, IT knowledge and business acumen. It also demands working closely with the ransomware victim's IT staff and the cyber insurance provider, if there is one. Because the top priority of the ransomware victim is fast recovery, it is critical to establish response groups that work effectively, in parallel, and with intimate collaboration. Progent has the scope of IT skills and the deep bench of experts to supplement your network support team and recover your network rapidly and affordably.

Services offered by Progent's ransomware negotiation team include:

• Determining the kind of ransomware involved in the attack
• Identifying and contacting the hacker
• Assessing the recovery risk
• Testing the TA's decryption capabilities
• Agreeing on a settlement with the victim and the cyber insurance provider
• Negotiating a settlement and timeline with the threat actor
• Checking adherence to anti-money laundering regulations
• Carrying out the crypto-currency transfer to the hacker
• Receiving, learning, and operating the hacker's decryption utility
• If needed, contacting the threat actor for assistance with the decryptor utility

• Quarantining affected endpoints and data stores to arrest the spread of the assault
• Making digital copies of every breached server and endpoint and data store in order to perform forensics in parallel with cleanup
• Adding A/V protection to all virus-free endpoints
• Recovering files from air-gapped restores or uncompromised machines
• Building a clean recovery environment
• Mapping and reconnecting drives to reflect exactly their pre-attack condition

Exfiltration Ransoms
Beyond extorting money for a decryption tool, current variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to steal (or "exfiltrate") information. Hackers are then able to demand an additional settlement in exchange for not divulging this data on the dark web. Sadly, there is no way to guarantee that exfiltrated data have been completely erased by the hacker. In fact, in numerous instances the hacker has limited say about who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of getting the advice of privacy attorneys, conducting an investigation into which data were taken, and sending the required alerts to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite network services across the United States for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have been awarded high-level certifications in core technologies such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial and ERP applications. This scope of expertise allows Progent to salvage and consolidate the undamaged parts of your IT environment after a ransomware attack and reconstruct them rapidly into a viable system. Progent has collaborated with top insurance carriers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Appleton
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Appleton, call Progent at 800-462-8800 or go to Contact Progent.