Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Services in Spartanburg
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex exercise that calls for a mix of field experience, IT knowledge and business acumen. It also calls for working closely with the victim's IT staff and the cyber insurance provider, if any. Because the top goal of the ransomware target is operational continuity, it is critical to establish recovery teams that operate efficiently, in parallel, and in close communication. Progent has the scope of technical skills and the deep bench of personnel to complement your IT staff and recover your network quickly and economically.

Services offered by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware involved in the attack
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Validating the hacker's decryption capabilities
• Determining a settlement with the victim and the cyber insurance provider
• Negotiating a settlement and timeline with the TA
• Verifying accordance with anti-money laundering sanctions
• Managing the crypto-currency transfer to the TA
• Acquiring, learning, and using the threat actor's decryption utility
• If needed, contacting the hacker for technical assistance with the decryption utility

• Quarantining infected endpoints to prevent further spread of the attack
• Making replicas of every infected server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing anti-virus agents to all virus-free endpoints
• Salvaging data from air-gapped backups or unscathed endpoints
• Building a clean recovery environment
• Remapping and reconnecting drives to match precisely their pre-encryption condition

Exfiltration Ransoms
Beyond extorting money for a decryption utility, current strains of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim commonly try to steal (or "exfiltrate") information. TAs can then demand an additional settlement for not divulging this information on the dark web. Unfortunately, there exists no way to prove that exfiltrated data have been totally deleted by the hacker. Actually, in numerous cases the TA has limited say about the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of getting the guidance of privacy attorneys, performing an investigation into which data were stolen, and sending the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite network services across the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have been awarded advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP application software. This breadth of expertise allows Progent to identify and consolidate the undamaged parts of your IT environment after a ransomware attack and rebuild them rapidly into a functioning network. Progent has worked with leading insurance carriers like Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Spartanburg
To contact with Progent about crypto-ransomware settlement services in Spartanburg, phone Progent at 800-462-8800 or go to Contact Progent.