Ransomware Response Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Jacksonville
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complicated activity that requires a mix of real-word experience, technical knowledge and business savvy. It also requires close co-operation with the ransomware victim's IT team and the cyber insurance carrier, if there is one. Since the top priority of the ransomware victim is operational continuity, it is vital to deploy recovery teams that operate efficiently, in parallel, and with intimate collaboration. Progent has the breadth of technical skills and the depth of experts to complement your IT staff and restore your network environment rapidly and affordably.

Services available from Progent's ransomware settlement experts include:

• Determining the kind of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Validating the hacker's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement and schedule with the TA
• Confirming compliance with anti-money laundering regulations
• Managing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the threat actor's decryptor mechanism
• If necessary, contacting the threat actor for technical help with the decryptor tool

• Quarantining infected endpoints and data stores to prevent further progress of the attack
• Creating replicas of each compromised device and data store to allow forensics without interfering with restoration
• Adding anti-virus protection to all clean endpoints
• Restoring data from air-gapped restores or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and connecting drives to reflect precisely their pre-encryption condition

Settling Exfiltration Ransoms
Beyond extorting money for a decryption tool, current strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly attempt to exfiltrate information. Hackers can then demand a separate ransom in exchange for not divulging this data on the dark web. Unfortunately, there exists no way to be certain that stolen data have been completely deleted by the TA. Actually, in numerous instances the threat actor has little say over where the information ends up. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of privacy attorneys, performing an audit on which data were compromised, and sending the necessary notifications to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises network services throughout the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes professionals who have earned advanced certifications in foundation technologies such as Cisco networking, VMware, and major Linux distros. Progent's data security experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and Enterprise Resource Planning applications. This scope of skills gives Progent the ability to identify and consolidate the undamaged pieces of your IT environment after a ransomware assault and rebuild them quickly into a viable system. Progent has collaborated with leading insurance providers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Jacksonville
To get in touch with Progent about crypto-ransomware settlement expertise in Jacksonville, phone Progent at 800-462-8800 or go to Contact Progent.