Ransomware Solutions Services

Overview of Progent's Ransomware Negotiation Consulting in Southlake
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that calls for a mix of real-word experience, IT knowledge and business savvy. It also demands close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if any. Since the top priority of the ransomware victim is fast recovery, it is vital to establish response teams that work efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of technical skills and the deep bench of experts to supplement your network support team and restore your network environment rapidly and economically.

Support available from Progent's ransomware settlement team include:

• Establishing the type of ransomware involved in the assault
• Making contact with the hacker
• Evaluating the likelihood of recovery
• Verifying the TA's decryption capabilities
• Determining a settlement range with the victim and the cyber insurance carrier
• Establishing a settlement amount and timeline with the hacker
• Confirming accordance with anti-money laundering (AML) regulations
• Carrying out the crypto-currency disbursement to the TA
• Receiving, reviewing, and using the threat actor's decryptor mechanism
• If needed, contacting the TA for technical assistance with the decryptor tool

• Isolating infected endpoints to prevent further progress of the attack
• Creating digital copies of each breached device and data store to allow forensics without interfering with recovery
• Adding A/V agents to all virus-free endpoints
• Recovering files from offline backups or uncompromised endpoints
• Building a clean recovery environment
• Mapping and connecting drives to match precisely their pre-encryption state

Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate information. Hackers can then require a separate payment for not divulging this information or selling it. Sadly, there is no way to be certain that stolen files have been completely erased by the TA. Actually, in numerous cases the TA has limited say about where the information ends up. Paying an exfiltration ransom does not free you from the necessity of engaging the guidance of legal counsel, performing an audit on which files were stolen, and performing the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and on-premises IT services across the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's data security consultants have earned industry-recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This broad array of expertise allows Progent to identify and consolidate the surviving pieces of your IT environment following a ransomware assault and rebuild them rapidly into a functioning system. Progent has worked with leading insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Southlake
To contact with Progent about crypto-ransomware settlement negotiation services in Southlake, phone Progent at 800-462-8800 or go to Contact Progent.