Ransomware Response Consultants

Progent's Ransomware Negotiation Services in Brooklyn
Progent has experience negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated exercise that requires a mix of field experience, technical skills and business savvy. It also demands working closely with the ransomware victim's IT staff and the insurance carrier, if any. Since the top goal of the ransomware victim is fast recovery, it is critical to establish response groups that work effectively, concurrently, and in close communication. Progent has the scope of technical knowledge and the depth of personnel to complement your IT staff and restore your network quickly and economically.

Services available from Progent's ransomware settlement team include:

• Determining the type of ransomware involved in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the threat actor's decryption tool
• Determining a settlement range with the victim and the insurance provider
• Negotiating a settlement and timeline with the threat actor
• Checking accordance with anti-money laundering (AML) regulations
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, learning, and operating the TA's decryption tool
• If needed, contacting the threat actor for technical help with the decryptor utility

• Isolating affected endpoints and data stores to prevent further progress of the assault
• Making replicas of each infected server and endpoint and data store to allow forensics without interfering with recovery
• Installing A/V protection to all virus-free endpoints
• Salvaging files from air-gapped restores or unscathed machines
• Building a clean environment
• Remapping and reconnecting datastores to match precisely their pre-attack condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, current variants of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") files. Hackers are then able to demand an additional settlement in exchange for not publishing this information or selling it. Unfortunately, there is no method to guarantee that exfiltrated data have been totally erased by the TA. In fact, in numerous cases the TA has limited control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for getting the guidance of legal counsel, conducting an inventory of data were taken, and performing the required notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises network services throughout the United States for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and major Linux distros. Progent's data security consultants have earned prestigious certifications including CISM, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and ERP applications. This breadth of skills allows Progent to salvage and consolidate the undamaged pieces of your information system following a ransomware attack and reconstruct them rapidly into a functioning network. Progent has worked with top cyber insurance carriers including Chubb to help organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Brooklyn
To get in touch with Progent about crypto-ransomware settlement services in Brooklyn, call Progent at 800-462-8800 or go to Contact Progent.