Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Charleston
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex exercise that requires a combination of field experience, technical skills and business acumen. It also demands close co-operation with the cyber-extortion target's IT staff and the insurance provider, if there is one. Because the number one goal of the ransomware target is fast recovery, it is vital to deploy recovery groups that operate effectively, in parallel, and in close communication. Progent offers the breadth of IT knowledge and the deep bench of personnel to supplement your IT staff and restore your network environment rapidly and economically.

Support offered by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Verifying the TA's decryption capabilities
• Determining a settlement amount with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the hacker
• Checking adherence to anti-money laundering (AML) regulations
• Overseeing the crypto-currency payment to the hacker
• Acquiring, reviewing, and operating the TA's decryption tool
• If necessary, contacting the TA for assistance with the decryption utility

• Isolating infected endpoints to prevent further progress of the attack
• Creating digital copies of each breached device and data store in order to perform forensics without interfering with restoration
• Adding anti-virus protection to all virus-free endpoints
• Recovering data from air-gapped backups or uncompromised endpoints
• Creating a clean recovery environment
• Remapping and connecting drives to reflect exactly their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to steal (or "exfiltrate") information. Hackers are then able to demand an extra payment for not posting this data or selling it. Unfortunately, there is no method to be certain that exfiltrated files have been completely deleted by the hacker. In fact, in numerous cases the TA has limited say about data custody. Paying an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy lawyers, conducting an audit on which files were compromised, and carrying out the mandated alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and on-premises network services throughout the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned advanced certifications in core technology platforms such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications including CISA, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning application software. This breadth of expertise allows Progent to salvage and integrate the undamaged pieces of your IT environment following a ransomware assault and reconstruct them quickly into an operational network. Progent has worked with leading cyber insurance carriers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Services in Charleston
To get in touch with Progent about ransomware settlement negotiation services in Charleston, phone Progent at 800-462-8800 or go to Contact Progent.