Ransomware Solutions Consultants

Overview of Progent's Ransomware Negotiation Consulting in Allentown
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated activity that requires a mix of real-word experience, IT skills and business savvy. It also calls for working closely with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Because the top goal of the ransomware target is operational continuity, it is vital to establish response teams that work efficiently, in parallel, and in close communication. Progent offers the scope of IT knowledge and the depth of personnel to complement your IT staff and restore your network environment rapidly and affordably.

Services available from Progent's ransomware settlement experts include:

• Determining the kind of ransomware used in the assault
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Validating the threat actor's decryption tool
• Determining a settlement with the victim and the insurance provider
• Negotiating a settlement amount and timeline with the TA
• Checking accordance with anti-money laundering regulations
• Overseeing the crypto-currency payment to the TA
• Acquiring, reviewing, and operating the threat actor's decryption mechanism
• If needed, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining affected endpoints to prevent further spread of the attack
• Making digital copies of every breached server and endpoint and data store in order to perform forensics without interfering with restoration
• Adding A/V agents to all clean endpoints
• Salvaging files from air-gapped backups or unscathed machines
• Building a pristine recovery environment
• Mapping and reconnecting drives to match exactly their pre-attack condition

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate files. TAs can then require an additional ransom in exchange for not divulging this data or selling it. Sadly, there exists no method to guarantee that exfiltrated data have been completely deleted by the TA. In fact, in many cases the hacker has limited say over who can access the stolen files. Paying an exfiltration ransom does not eliminate the necessity of engaging the guidance of legal counsel, conducting an investigation into which files were taken, and carrying out the mandated alerts to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for over 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned high-level certifications in core technologies such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This breadth of skills allows Progent to identify and consolidate the undamaged pieces of your information system following a ransomware intrusion and rebuild them rapidly into a functioning system. Progent has collaborated with top insurance providers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Allentown
To get in touch with Progent about crypto-ransomware settlement guidance in Allentown, phone Progent at 800-462-8800 or go to Contact Progent.