Ransomware Response Consulting Services

Progent's Ransomware Negotiation Consulting in Clearwater
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complicated activity that requires a mix of field experience, IT knowledge and business acumen. It also requires close co-operation with the ransomware victim's IT team and the cyber insurance provider, if any. Because the number one priority of the ransomware victim is operational continuity, it is critical to deploy response groups that work efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of IT knowledge and the deep bench of personnel to supplement your network support team and recover your network rapidly and economically.

Services provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Evaluating the recovery risk
• Verifying the TA's decryption tool
• Budgeting a settlement amount with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and timeline with the hacker
• Checking accordance with anti-money laundering regulations
• Carrying out the crypto-currency payment to the hacker
• Acquiring, learning, and using the TA's decryption tool
• If needed, contacting the TA for assistance with the decryptor tool

• Isolating affected endpoints and data stores to prevent further spread of the assault
• Creating replicas of every infected device and data store in order to perform forensics in parallel with restoration
• Adding anti-virus agents to all virus-free endpoints
• Recovering data from air-gapped backups or uncompromised machines
• Building a pristine recovery environment
• Remapping and connecting drives to reflect exactly their pre-attack condition

Paying Exfiltration Ransoms
Beyond demanding money for a decryption utility, current strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") information. Hackers can then demand an additional payment for not posting this information on the dark web. Unfortunately, there exists no way to be certain that stolen files have been totally erased by the TA. Actually, in many cases the hacker has little control about where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy attorneys, conducting an investigation into which data were compromised, and performing the necessary alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite IT services throughout the U.S. for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes consultants who have earned high-level certifications in core technology platforms including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This broad array of skills gives Progent the ability to identify and consolidate the surviving pieces of your information system following a ransomware attack and rebuild them rapidly into a viable network. Progent has collaborated with top insurance carriers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Clearwater
To get in touch with Progent about crypto-ransomware settlement expertise in Clearwater, phone Progent at 800-462-8800 or go to Contact Progent.