Ransomware Response Consulting Experts

Progent's Ransomware Negotiation Consulting in Norfolk
Progent has experience negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complicated exercise that requires a mix of real-word experience, IT knowledge and business savvy. It also calls for close co-operation with the victim's IT team and the cyber insurance provider, if there is one. Because the number one priority of the ransomware target is fast recovery, it is vital to deploy response teams that work efficiently, concurrently, and in close communication. Progent offers the breadth of IT knowledge and the deep bench of personnel to supplement your network staff and recover your network quickly and economically.

Services provided by Progent's ransomware settlement experts include:

• Determining the type of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Testing the TA's decryption tool
• Budgeting a settlement payment with the victim and the insurance provider
• Negotiating a settlement and schedule with the TA
• Verifying accordance with anti-money laundering (AML) sanctions
• Overseeing the crypto-currency payment to the TA
• Receiving, reviewing, and using the TA's decryption tool
• If needed, contacting the hacker for technical help with the decryptor utility

• Quarantining affected endpoints and data stores to arrest the spread of the assault
• Making replicas of every infected server and endpoint and data store to allow forensics in parallel with recovery
• Installing A/V protection to all clean endpoints
• Salvaging data from offline backups or unscathed machines
• Creating a pristine recovery environment
• Remapping and connecting datastores to reflect precisely their pre-attack condition

Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") files. Hackers can then require an extra ransom in exchange for not publishing this information or selling it. Unfortunately, there exists no method to guarantee that exfiltrated files have been completely erased by the threat actor. Actually, in numerous instances the TA has little say over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, performing an audit on which files were stolen, and performing the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite network services throughout the United States for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning software. This scope of expertise gives Progent the ability to identify and integrate the surviving parts of your IT environment after a ransomware assault and reconstruct them quickly into a viable system. Progent has collaborated with top insurance providers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Norfolk
To contact with Progent about ransomware settlement guidance in Norfolk, call Progent at 800-462-8800 or go to Contact Progent.