Ransomware Response Consulting Services

Progent's Ransomware Settlement Negotiation Services in Brooklyn
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that requires a mix of real-word experience, technical skills and business acumen. It also requires working closely with the victim's IT team and the cyber insurance carrier, if any. Because the top priority of the ransomware victim is fast recovery, it is vital to deploy recovery teams that work effectively, concurrently, and with intimate collaboration. Progent offers the breadth of IT skills and the deep bench of experts to complement your network support team and recover your network environment quickly and economically.

Support provided by Progent's ransomware settlement negotiation team include:

• Determining the kind of ransomware involved in the assault
• identifying and contacting the hacker
• Evaluating the recovery risk
• Validating the TA's decryption capabilities
• Budgeting a settlement amount with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and timeline with the TA
• Checking compliance with anti-money laundering (AML) laws
• Overseeing the crypto-currency payment to the hacker
• Receiving, learning, and using the hacker's decryption mechanism
• If necessary, contacting the TA for technical assistance with the decryptor tool

• Quarantining affected endpoints and data stores to prevent further progress of the assault
• Making digital copies of every breached server and endpoint and data store in order to perform forensics without interfering with cleanup
• Adding anti-virus agents to all virus-free endpoints
• Recovering files from air-gapped restores or uncompromised machines
• Building a pristine recovery environment
• Mapping and reconnecting datastores to match exactly their pre-attack condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern strains of ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to exfiltrate files. Hackers can then require an additional ransom in exchange for not publishing this information on the dark web. Unfortunately, there is no method to prove that exfiltrated data have been completely erased by the threat actor. In fact, in numerous instances the threat actor has limited say over the disposition of the data. Paying an exfiltration ransom does not free you from the need for getting the advice of privacy lawyers, performing an investigation into which files were compromised, and carrying out the required alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and on-premises network services throughout the United States for over 20 years and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned high-level certifications in foundation technology platforms including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also has guidance in financial and Enterprise Resource Planning application software. This breadth of skills allows Progent to salvage and consolidate the surviving parts of your network after a ransomware intrusion and reconstruct them rapidly into a viable network. Progent has worked with top insurance carriers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Brooklyn
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Brooklyn, phone Progent at 800-462-8800 or go to Contact Progent.