Ransomware Response Consulting Experts

Overview of Progent's Ransomware Negotiation Consulting in Orlando
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that calls for a combination of real-word experience, technical skills and business savvy. It also requires working closely with the victim's IT staff and the insurance carrier, if there is one. Because the top priority of the ransomware victim is operational continuity, it is critical to deploy response groups that operate effectively, concurrently, and with intimate collaboration. Progent offers the breadth of technical skills and the deep bench of experts to complement your network support team and recover your network quickly and economically.

Services available from Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the attack
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Validating the TA's decryption capabilities
• Agreeing on a settlement with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and timeline with the TA
• Verifying adherence to anti-money laundering sanctions
• Managing the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and using the threat actor's decryptor utility
• If needed, contacting the threat actor for technical assistance with the decryption utility

• Isolating affected endpoints and data stores to arrest the spread of the attack
• Creating replicas of each breached device and data store in order to perform forensics in parallel with restoration
• Installing A/V protection to all clean endpoints
• Restoring data from air-gapped restores or uncompromised machines
• Building a pristine recovery environment
• Remapping and connecting drives to reflect precisely their pre-attack state

Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern variants of ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to steal (or "exfiltrate") files. Hackers can then demand a separate ransom in exchange for not divulging this information on the dark web. Unfortunately, there is no way to prove that stolen data have been totally erased by the threat actor. In fact, in many cases the hacker has little say about where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy attorneys, conducting an investigation into which files were stolen, and carrying out the necessary notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the United States for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technology platforms including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning software. This breadth of skills gives Progent the ability to identify and integrate the surviving pieces of your IT environment following a ransomware intrusion and rebuild them quickly into an operational system. Progent has collaborated with leading cyber insurance providers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Orlando
To contact with Progent about crypto-ransomware settlement negotiation services in Orlando, call Progent at 800-462-8800 or go to Contact Progent.