Ransomware Solutions Services

Progent's Ransomware Negotiation Consulting in Cambridge
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that requires a combination of real-word experience, IT skills and business savvy. It also demands close co-operation with the ransomware victim's IT team and the insurance provider, if any. Since the number one goal of the ransomware target is fast recovery, it is critical to establish response teams that work efficiently, in parallel, and with intimate collaboration. Progent has the breadth of technical skills and the deep bench of personnel to supplement your IT support team and restore your network environment quickly and economically.

Support available from Progent's ransomware settlement experts include:

• Establishing the kind of ransomware involved in the attack
• Identifying and contacting the hacker
• Evaluating the recovery risk
• Verifying the threat actor's decryption tool
• Deciding on an acceptable settlement amount with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the threat actor
• Checking adherence to anti-money laundering (AML) sanctions
• Overseeing the crypto-currency transfer to the TA
• Acquiring, learning, and using the threat actor's decryption mechanism
• If necessary, contacting the TA for assistance with the decryption utility

• Isolating affected endpoints to arrest the progress of the assault
• Creating digital copies of each compromised server and endpoint and data store in order to perform forensics without interfering with recovery
• Adding A/V protection to all virus-free endpoints
• Recovering files from air-gapped restores or unscathed machines
• Building a clean recovery environment
• Remapping and connecting drives to reflect exactly their pre-attack state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, modern strains of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often try to exfiltrate files. TAs are then able to demand an additional settlement in exchange for not publishing this information or selling it. Unfortunately, there is no method to be certain that exfiltrated data have been completely deleted by the TA. In fact, in numerous instances the hacker has little control about the disposition of the data. Settling an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, performing an audit on which data were compromised, and sending the mandated alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and onsite IT services throughout the U.S. for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes consultants who have earned advanced certifications in core technology platforms including Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned industry-recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and ERP applications. This breadth of expertise allows Progent to identify and integrate the undamaged parts of your network after a ransomware attack and rebuild them rapidly into a viable network. Progent has worked with top cyber insurance providers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Cambridge
To contact with Progent about crypto-ransomware settlement negotiation guidance in Cambridge, phone Progent at 800-462-8800 or go to Contact Progent.