Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Negotiation Services in Charlotte
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that requires a combination of field experience, technical skills and business savvy. It also requires working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if there is one. Because the top goal of the ransomware victim is operational continuity, it is critical to deploy recovery groups that work efficiently, in parallel, and in close communication. Progent offers the breadth of IT knowledge and the depth of experts to supplement your network staff and recover your network environment rapidly and economically.

Services available from Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the attack
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Validating the hacker's decryption capabilities
• Determining a settlement with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement and schedule with the TA
• Confirming accordance with anti-money laundering laws
• Carrying out the crypto-currency disbursement to the hacker
• Receiving, reviewing, and operating the hacker's decryptor mechanism
• If needed, contacting the hacker for assistance with the decryption utility

• Isolating affected endpoints and data stores to prevent further progress of the assault
• Creating replicas of each compromised device and data store to allow forensics in parallel with cleanup
• Installing anti-virus agents to all virus-free endpoints
• Recovering data from offline restores or unscathed machines
• Creating a clean environment
• Mapping and reconnecting datastores to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption utility, modern variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly try to exfiltrate information. TAs can then demand an extra payment in exchange for not posting this data or selling it. Unfortunately, there is no method to prove that exfiltrated files have been totally erased by the hacker. In fact, in numerous cases the TA has limited control over data custody. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy lawyers, performing an inventory of files were stolen, and sending the required alerts to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and onsite IT services throughout the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned high-level certifications in core technology platforms such as Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP software. This broad array of skills gives Progent the ability to identify and consolidate the surviving pieces of your network after a ransomware assault and reconstruct them quickly into a functioning network. Progent has worked with top insurance carriers including Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Charlotte
To contact with Progent about crypto-ransomware settlement negotiation services in Charlotte, call Progent at 800-462-8800 or go to Contact Progent.