Ransomware Response Services

Progent's Ransomware Settlement Negotiation Services in Washington
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that requires a combination of real-word experience, technical skills and business acumen. It also requires working closely with the cyber-extortion target's IT team and the insurance provider, if any. Since the number one goal of the ransomware victim is fast recovery, it is vital to deploy recovery groups that work effectively, concurrently, and with intimate collaboration. Progent has the scope of IT knowledge and the depth of experts to supplement your network support team and restore your network environment quickly and affordably.

Support available from Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Determining a settlement payment with the ransomware victim and the insurance provider
• Negotiating a settlement amount and timeline with the hacker
• Checking accordance with anti-money laundering (AML) sanctions
• Managing the crypto-currency transfer to the TA
• Receiving, learning, and operating the hacker's decryption mechanism
• If needed, contacting the TA for technical help with the decryption utility

• Isolating infected endpoints to prevent further spread of the assault
• Making digital copies of each breached server and endpoint and data store to allow forensics in parallel with recovery
• Installing anti-virus agents to all virus-free endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Building a clean recovery environment
• Remapping and connecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern variants of ransomware like Ryuk, Maze, Netwalker, and Nephilim often try to exfiltrate files. Hackers can then demand a separate settlement in exchange for not posting this information or selling it. Sadly, there exists no method to guarantee that exfiltrated data have been totally erased by the threat actor. In fact, in numerous cases the TA has limited control about where the information ends up. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy lawyers, conducting an audit on which files were taken, and performing the required alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises IT services across the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have been awarded advanced certifications in core technology platforms including Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP software. This scope of expertise allows Progent to identify and integrate the undamaged parts of your information system following a ransomware attack and reconstruct them quickly into a functioning system. Progent has worked with leading cyber insurance providers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Expertise in Washington
To get in touch with Progent about crypto-ransomware settlement expertise in Washington, call Progent at 800-462-8800 or go to Contact Progent.