Ransomware Solutions Services

Overview of Progent's Ransomware Negotiation Services in Rochester
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that calls for a combination of field experience, IT knowledge and business acumen. It also calls for working closely with the cyber-extortion target's IT staff and the cyber insurance provider, if any. Since the number one priority of the ransomware victim is operational continuity, it is critical to deploy response teams that work efficiently, in parallel, and in close communication. Progent has the breadth of technical knowledge and the deep bench of personnel to supplement your network staff and recover your network rapidly and economically.

Services offered by Progent's ransomware settlement experts include:

• Determining the kind of ransomware used in the assault
• Making contact with the hacker
• Assessing the likelihood of recovery
• Testing the hacker's decryption capabilities
• Determining a settlement with the ransomware victim and the cyber insurance provider
• Negotiating a settlement amount and schedule with the threat actor
• Verifying adherence to anti-money laundering (AML) laws
• Managing the crypto-currency transfer to the TA
• Acquiring, reviewing, and using the TA's decryptor mechanism
• If needed, contacting the hacker for technical help with the decryption utility

• Quarantining infected endpoints and data stores to arrest the spread of the assault
• Creating replicas of every breached device and data store to allow forensics in parallel with cleanup
• Installing anti-virus agents to all clean endpoints
• Recovering data from air-gapped backups or unscathed machines
• Creating a clean recovery environment
• Remapping and connecting drives to match exactly their pre-attack state

Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of ransomware like Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate files. Hackers are then able to require an extra payment in exchange for not divulging this data on the dark web. Sadly, there exists no way to be certain that exfiltrated data have been totally erased by the threat actor. Actually, in numerous instances the threat actor has little say about data custody. Paying an exfiltration ransom does not eliminate the need for seeking the guidance of legal counsel, performing an audit on which data were taken, and carrying out the necessary notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and on-premises network services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned advanced certifications in core technologies including Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning applications. This breadth of skills allows Progent to salvage and consolidate the undamaged parts of your IT environment following a ransomware assault and reconstruct them quickly into a functioning network. Progent has worked with leading insurance carriers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Rochester
To get in touch with Progent about crypto-ransomware settlement negotiation services in Rochester, call Progent at 800-462-8800 or go to Contact Progent.