Ransomware Response Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Allentown
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated activity that requires a mix of real-word experience, IT knowledge and business savvy. It also calls for close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Since the number one priority of the ransomware target is fast recovery, it is critical to deploy recovery groups that operate efficiently, in parallel, and with intimate collaboration. Progent offers the scope of technical knowledge and the depth of experts to complement your IT staff and recover your network quickly and affordably.

Services offered by Progent's ransomware settlement team include:

• Establishing the type of ransomware used in the assault
• Identifying and contacting the hacker
• Assessing the recovery risk
• Testing the TA's decryption tool
• Determining a settlement range with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the hacker
• Checking adherence to anti-money laundering (AML) laws
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the threat actor's decryptor mechanism
• If needed, contacting the hacker for assistance with the decryption utility

• Isolating infected endpoints to prevent further spread of the assault
• Making replicas of each infected device and data store to allow forensics in parallel with recovery
• Adding A/V protection to all clean endpoints
• Recovering data from offline backups or uncompromised endpoints
• Building a clean environment
• Mapping and connecting drives to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate files. Hackers can then demand an additional settlement in exchange for not publishing this information on the dark web. Sadly, there is no method to be certain that exfiltrated data have been totally deleted by the threat actor. In fact, in many cases the threat actor has limited control about the disposition of the data. Paying an exfiltration ransom does not eliminate the necessity of seeking the advice of legal counsel, conducting an inventory of files were taken, and sending the mandated alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and onsite network services throughout the U.S. for over 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned advanced certifications in foundation technologies such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned prestigious certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This scope of skills allows Progent to identify and consolidate the undamaged parts of your IT environment after a ransomware attack and rebuild them quickly into a functioning system. Progent has worked with leading cyber insurance carriers like Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Allentown
To contact with Progent about ransomware settlement services in Allentown, phone Progent at 800-462-8800 or go to Contact Progent.