Ransomware Response Services

Overview of Progent's Ransomware Negotiation Consulting in Atlanta
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex activity that requires a combination of field experience, technical knowledge and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if there is one. Because the top priority of the ransomware target is operational continuity, it is critical to establish response teams that operate effectively, concurrently, and in close communication. Progent offers the breadth of IT knowledge and the deep bench of experts to supplement your network staff and restore your network rapidly and affordably.

Support provided by Progent's ransomware settlement negotiation team include:

• Establishing the type of ransomware involved in the assault
• Identifying and contacting the hacker persona
• Assessing the recovery risk
• Validating the hacker's decryption capabilities
• Determining a settlement amount with the ransomware victim and the insurance provider
• Negotiating a settlement amount and schedule with the hacker
• Confirming adherence to anti-money laundering (AML) regulations
• Managing the crypto-currency disbursement to the hacker
• Receiving, learning, and using the TA's decryptor tool
• If necessary, contacting the hacker for assistance with the decryption tool

• Quarantining infected endpoints and data stores to prevent further spread of the assault
• Making replicas of each infected device and data store to allow forensics without interfering with restoration
• Installing anti-virus agents to all clean endpoints
• Recovering files from offline backups or unscathed machines
• Creating a clean environment
• Remapping and connecting datastores to match precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting money for a decryption utility, current strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to steal (or "exfiltrate") information. Hackers are then able to demand an extra payment for not publishing this data or selling it. Sadly, there exists no way to guarantee that exfiltrated data have been completely deleted by the hacker. Actually, in many cases the TA has little control about where the information ends up. Settling an exfiltration ransom does not free you from the necessity of seeking the advice of privacy lawyers, performing an audit on which files were compromised, and carrying out the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises IT services throughout the U.S. for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in foundation technologies including Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned prestigious certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial and ERP applications. This breadth of skills gives Progent the ability to identify and integrate the surviving parts of your network after a ransomware intrusion and reconstruct them quickly into a viable system. Progent has collaborated with leading insurance providers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Atlanta
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Atlanta, call Progent at 800-462-8800 or go to Contact Progent.