Ransomware Solutions Consultants

Progent's Ransomware Settlement Negotiation Consulting in Cambridge
Progent has experience negotiating ransomware settlements with threat actors (TAs). Reaching an optimum settlement is a complex exercise that calls for a mix of real-word experience, technical knowledge and business savvy. It also requires working closely with the victim's IT staff and the cyber insurance carrier, if any. Because the number one priority of the ransomware victim is fast recovery, it is critical to establish response groups that operate effectively, concurrently, and with intimate collaboration. Progent has the scope of technical knowledge and the depth of personnel to complement your IT staff and restore your network rapidly and economically.

Support available from Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the assault
• Making contact with the hacker persona
• Assessing the recovery risk
• Validating the threat actor's decryption tool
• Determining a settlement range with the victim and the cyber insurance provider
• Establishing a settlement amount and timeline with the threat actor
• Checking accordance with anti-money laundering sanctions
• Carrying out the crypto-currency payment to the hacker
• Acquiring, learning, and using the threat actor's decryptor utility
• If necessary, contacting the threat actor for technical assistance with the decryption tool

• Isolating infected endpoints and data stores to prevent further spread of the attack
• Making digital copies of each breached server and endpoint and data store to allow forensics without interfering with recovery
• Adding A/V agents to all clean endpoints
• Recovering data from air-gapped restores or unscathed endpoints
• Creating a pristine recovery environment
• Remapping and connecting datastores to reflect precisely their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption utility, modern strains of ransomware such as Ryuk, Maze, Netwalker, and Egregor often attempt to exfiltrate information. Hackers are then able to demand a separate settlement in exchange for not posting this information or selling it. Sadly, there exists no method to prove that stolen files have been totally erased by the threat actor. In fact, in numerous cases the TA has limited say about the disposition of the data. Paying an exfiltration ransom does not free you from the need for seeking the advice of privacy lawyers, conducting an audit on which data were compromised, and sending the mandated notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite IT services across the U.S. for more than two decades and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes consultants who have earned high-level certifications in core technologies such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and ERP applications. This broad array of expertise gives Progent the ability to identify and integrate the undamaged pieces of your IT environment following a ransomware intrusion and rebuild them rapidly into an operational system. Progent has collaborated with leading insurance carriers including Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Guidance in Cambridge
To get in touch with Progent about ransomware settlement negotiation services in Cambridge, phone Progent at 800-462-8800 or go to Contact Progent.