Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Services in Fort Worth
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complicated exercise that requires a combination of real-word experience, IT skills and business savvy. It also requires working closely with the ransomware victim's IT team and the cyber insurance provider, if any. Since the top priority of the ransomware victim is operational continuity, it is critical to deploy response groups that work efficiently, concurrently, and in close communication. Progent has the breadth of IT knowledge and the depth of personnel to complement your network support team and recover your network environment quickly and affordably.

Services offered by Progent's ransomware negotiation team include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Agreeing on a settlement range with the victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the TA
• Checking adherence to anti-money laundering (AML) regulations
• Carrying out the crypto-currency payment to the TA
• Receiving, reviewing, and operating the threat actor's decryption tool
• If needed, contacting the hacker for assistance with the decryption tool

• Isolating infected endpoints to arrest the progress of the assault
• Making replicas of each infected server and endpoint and data store to allow forensics without interfering with restoration
• Installing anti-virus protection to all virus-free endpoints
• Restoring data from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Mapping and connecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") files. TAs can then require an additional settlement in exchange for not divulging this information on the dark web. Unfortunately, there is no way to guarantee that exfiltrated data have been totally deleted by the hacker. In fact, in many cases the hacker has little say about the disposition of the data. Settling an exfiltration ransom does not free you from the need for seeking the guidance of legal counsel, performing an audit on which data were taken, and sending the necessary notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and onsite IT services across the United States for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded high-level certifications in foundation technologies such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and ERP application software. This broad array of skills gives Progent the ability to identify and consolidate the surviving parts of your IT environment after a ransomware intrusion and rebuild them rapidly into a functioning network. Progent has worked with leading insurance providers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Fort Worth
To get in touch with Progent about ransomware settlement guidance in Fort Worth, phone Progent at 800-462-8800 or go to Contact Progent.