Ransomware Response Services

Progent's Ransomware Settlement Negotiation Consulting in The Woodlands
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complex activity that calls for a mix of field experience, IT knowledge and business savvy. It also requires working closely with the ransomware victim's IT team and the insurance provider, if any. Since the number one goal of the ransomware victim is operational continuity, it is vital to establish response teams that work efficiently, in parallel, and with intimate collaboration. Progent offers the breadth of IT knowledge and the depth of personnel to complement your IT staff and recover your network quickly and economically.

Services offered by Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Evaluating the recovery risk
• Testing the hacker's decryption tool
• Deciding on an acceptable settlement payment with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and timeline with the hacker
• Confirming accordance with anti-money laundering sanctions
• Overseeing the crypto-currency transfer to the TA
• Receiving, reviewing, and using the hacker's decryption mechanism
• If necessary, contacting the TA for technical assistance with the decryption utility

• Isolating affected endpoints to arrest the spread of the assault
• Creating digital copies of each breached device and data store to allow forensics without interfering with cleanup
• Adding A/V protection to all clean endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Creating a clean recovery environment
• Remapping and reconnecting datastores to match exactly their pre-encryption condition

Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to exfiltrate information. TAs can then require an extra ransom for not posting this information or selling it. Unfortunately, there exists no method to guarantee that exfiltrated files have been totally erased by the hacker. In fact, in numerous instances the hacker has little say over the disposition of the data. Settling an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, performing an investigation into which files were stolen, and sending the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services throughout the United States for over 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned high-level certifications in core technologies including Cisco networking, VMware, and major Linux distros. Progent's data security consultants have earned industry-recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and ERP software. This scope of skills allows Progent to salvage and integrate the surviving parts of your IT environment following a ransomware attack and rebuild them rapidly into a functioning network. Progent has collaborated with top insurance carriers including Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in The Woodlands
To contact with Progent about ransomware settlement expertise in The Woodlands, phone Progent at 800-462-8800 or go to Contact Progent.