Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Consulting in Allentown
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complicated exercise that requires a combination of field experience, technical skills and business savvy. It also requires working closely with the ransomware victim's IT team and the cyber insurance carrier, if there is one. Since the number one goal of the ransomware victim is fast recovery, it is vital to establish recovery groups that operate efficiently, in parallel, and in close communication. Progent offers the scope of IT knowledge and the depth of experts to complement your IT support team and restore your network rapidly and affordably.

Support offered by Progent's ransomware negotiation team include:

• Determining the type of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Testing the TA's decryption tool
• Deciding on an acceptable settlement amount with the ransomware victim and the cyber insurance carrier
• Establishing a settlement and schedule with the hacker
• Confirming compliance with anti-money laundering (AML) sanctions
• Managing the crypto-currency transfer to the TA
• Acquiring, reviewing, and using the hacker's decryptor utility
• If necessary, contacting the hacker for technical help with the decryptor tool

• Quarantining affected endpoints to prevent further progress of the attack
• Creating replicas of every breached server and endpoint and data store in order to perform forensics in parallel with cleanup
• Installing A/V agents to all clean endpoints
• Restoring files from air-gapped backups or uncompromised machines
• Creating a clean recovery environment
• Mapping and connecting datastores to match exactly their pre-encryption condition

Settling Exfiltration Ransoms
In addition to extorting money for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often try to steal (or "exfiltrate") files. Hackers are then able to demand an extra payment for not posting this information on the dark web. Sadly, there is no way to be certain that stolen files have been completely deleted by the threat actor. Actually, in many instances the threat actor has little control about where the information ends up. Settling an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, conducting an investigation into which data were stolen, and carrying out the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite IT services throughout the United States for more than 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technology platforms including Cisco networking, VMware, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications such as CISA, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial management and ERP applications. This breadth of skills allows Progent to identify and consolidate the undamaged parts of your information system following a ransomware attack and reconstruct them quickly into a functioning system. Progent has worked with top cyber insurance providers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Allentown
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Allentown, call Progent at 800-462-8800 or go to Contact Progent.