Ransomware Solutions Consultants

Overview of Progent's Ransomware Negotiation Services in Allentown
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex activity that requires a mix of real-word experience, IT knowledge and business savvy. It also requires close co-operation with the victim's IT staff and the cyber insurance carrier, if any. Since the number one goal of the ransomware target is fast recovery, it is vital to establish response groups that work effectively, in parallel, and with intimate collaboration. Progent has the scope of IT knowledge and the depth of personnel to complement your IT staff and restore your network environment quickly and affordably.

Services offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Validating the threat actor's decryption capabilities
• Deciding on an acceptable settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement and timeline with the threat actor
• Confirming adherence to anti-money laundering (AML) laws
• Overseeing the crypto-currency transfer to the hacker
• Acquiring, learning, and operating the threat actor's decryptor utility
• If needed, contacting the hacker for assistance with the decryption utility

• Quarantining infected endpoints and data stores to prevent further progress of the assault
• Creating digital copies of each infected server and endpoint and data store to allow forensics without interfering with restoration
• Installing A/V agents to all clean endpoints
• Recovering files from air-gapped backups or unscathed endpoints
• Building a clean recovery environment
• Remapping and connecting datastores to reflect precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") files. Hackers are then able to demand an extra payment for not posting this information on the dark web. Sadly, there is no method to be certain that stolen data have been totally erased by the TA. In fact, in many cases the threat actor has little control over the disposition of the data. Paying an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy lawyers, conducting an investigation into which data were compromised, and carrying out the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services throughout the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned high-level certifications in core technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications including CISM, CISSP, and GIAC. (See Progent's certifications). Progent also has top-tier support in financial management and Enterprise Resource Planning software. This scope of expertise allows Progent to identify and integrate the surviving parts of your information system following a ransomware assault and reconstruct them quickly into an operational network. Progent has collaborated with leading insurance providers like Chubb to help organizations recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Guidance in Allentown
To contact with Progent about crypto-ransomware settlement negotiation expertise in Allentown, call Progent at 800-462-8800 or go to Contact Progent.