Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in Virginia Beach
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complex exercise that requires a combination of real-word experience, technical skills and business acumen. It also calls for working closely with the victim's IT team and the cyber insurance carrier, if any. Since the top goal of the ransomware target is fast recovery, it is vital to establish recovery groups that work efficiently, concurrently, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of experts to complement your IT staff and recover your network quickly and economically.

Support offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware used in the attack
• Making contact with the hacker persona
• Evaluating the recovery risk
• Verifying the TA's decryption tool
• Budgeting a settlement amount with the victim and the insurance provider
• Negotiating a settlement and timeline with the hacker
• Confirming accordance with anti-money laundering (AML) sanctions
• Managing the crypto-currency transfer to the hacker
• Acquiring, reviewing, and operating the hacker's decryption mechanism
• If necessary, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining infected endpoints and data stores to arrest the spread of the assault
• Making digital copies of each infected device and data store to allow forensics without interfering with cleanup
• Adding anti-virus agents to all clean endpoints
• Recovering data from offline restores or unscathed endpoints
• Building a pristine environment
• Remapping and connecting datastores to reflect precisely their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly attempt to exfiltrate files. Hackers can then require a separate ransom for not publishing this data or selling it. Unfortunately, there exists no method to prove that stolen data have been completely deleted by the threat actor. In fact, in many instances the threat actor has limited control about where the information ends up. Settling an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, conducting an investigation into which data were compromised, and sending the necessary alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite network services throughout the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in foundation technology platforms such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning software. This scope of expertise allows Progent to identify and integrate the surviving parts of your information system after a ransomware attack and rebuild them quickly into a functioning network. Progent has worked with top cyber insurance carriers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Virginia Beach
To get in touch with Progent about ransomware settlement guidance in Virginia Beach, call Progent at 800-462-8800 or go to Contact Progent.