Ransomware Response Services

Progent's Ransomware Settlement Negotiation Consulting in Webster
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complex activity that calls for a combination of real-word experience, IT knowledge and business acumen. It also requires close co-operation with the victim's IT team and the insurance provider, if there is one. Because the top priority of the ransomware target is fast recovery, it is critical to deploy recovery groups that operate efficiently, concurrently, and in close communication. Progent has the breadth of technical knowledge and the deep bench of experts to supplement your network staff and recover your network quickly and economically.

Support provided by Progent's ransomware negotiation experts include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Testing the hacker's decryption tool
• Determining a settlement payment with the victim and the insurance carrier
• Negotiating a settlement and timeline with the hacker
• Confirming accordance with anti-money laundering regulations
• Carrying out the crypto-currency payment to the TA
• Acquiring, reviewing, and operating the threat actor's decryption utility
• If necessary, contacting the TA for technical assistance with the decryption utility

• Quarantining infected endpoints and data stores to prevent further spread of the assault
• Making digital copies of each breached server and endpoint and data store to allow forensics in parallel with restoration
• Installing A/V protection to all clean endpoints
• Salvaging files from offline backups or unscathed machines
• Creating a clean environment
• Remapping and reconnecting datastores to match precisely their pre-attack condition

Settling Exfiltration Ransoms
In addition to demanding payment for a decryption utility, modern variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") information. Hackers can then demand an additional payment in exchange for not posting this information or selling it. Unfortunately, there is no way to guarantee that exfiltrated files have been totally deleted by the hacker. In fact, in numerous instances the TA has little say over the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of engaging the guidance of legal counsel, conducting an audit on which files were compromised, and sending the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and onsite IT services throughout the United States for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial and ERP application software. This scope of expertise allows Progent to identify and consolidate the undamaged pieces of your IT environment following a ransomware assault and rebuild them rapidly into a viable network. Progent has collaborated with top cyber insurance providers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Webster
To get in touch with Progent about ransomware settlement negotiation services in Webster, call Progent at 800-462-8800 or go to Contact Progent.