Ransomware Solutions Consulting Services

Progent's Ransomware Settlement Negotiation Services in Baltimore
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complicated activity that calls for a combination of real-word experience, technical knowledge and business savvy. It also demands working closely with the victim's IT staff and the cyber insurance carrier, if any. Because the top goal of the ransomware target is operational continuity, it is vital to deploy recovery teams that work efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of IT knowledge and the deep bench of personnel to supplement your network staff and recover your network quickly and affordably.

Support offered by Progent's ransomware negotiation experts include:

• Establishing the kind of ransomware used in the assault
• Making contact with the hacker
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Determining a settlement amount with the ransomware victim and the insurance provider
• Establishing a settlement and schedule with the threat actor
• Verifying adherence to anti-money laundering regulations
• Overseeing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the TA's decryption tool
• If needed, contacting the TA for technical help with the decryptor utility

• Isolating infected endpoints to prevent further progress of the attack
• Creating digital copies of every infected server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing A/V agents to all clean endpoints
• Recovering files from offline backups or unscathed endpoints
• Creating a clean recovery environment
• Remapping and connecting drives to match exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting money for a decryption utility, modern variants of ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly try to steal (or "exfiltrate") files. Hackers can then demand a separate ransom for not posting this information or selling it. Sadly, there exists no method to guarantee that exfiltrated data have been totally erased by the threat actor. In fact, in many cases the threat actor has little control over data custody. Paying an exfiltration ransom does not eliminate the necessity of engaging the guidance of legal counsel, performing an investigation into which files were taken, and sending the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite network services throughout the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technology platforms such as Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications including CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning application software. This breadth of expertise allows Progent to identify and integrate the surviving pieces of your network after a ransomware assault and rebuild them rapidly into a functioning network. Progent has collaborated with top cyber insurance providers including Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Baltimore
To contact with Progent about crypto-ransomware settlement guidance in Baltimore, call Progent at 800-462-8800 or go to Contact Progent.