Ransomware Response Consulting Experts

Progent's Ransomware Negotiation Consulting in Buffalo
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated activity that calls for a mix of real-word experience, technical knowledge and business acumen. It also requires working closely with the cyber-extortion target's IT team and the cyber insurance carrier, if any. Since the top priority of the ransomware target is fast recovery, it is critical to deploy recovery groups that operate effectively, concurrently, and with intimate collaboration. Progent has the breadth of IT knowledge and the deep bench of experts to supplement your IT support team and recover your network environment quickly and affordably.

Services offered by Progent's ransomware settlement experts include:

• Establishing the type of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Verifying the hacker's decryption tool
• Budgeting a settlement payment with the ransomware victim and the insurance carrier
• Negotiating a settlement and schedule with the hacker
• Checking accordance with anti-money laundering laws
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the hacker's decryption tool
• If necessary, contacting the hacker for technical help with the decryption utility

• Quarantining infected endpoints and data stores to prevent further spread of the assault
• Making digital copies of each infected server and endpoint and data store to allow forensics without interfering with recovery
• Adding A/V agents to all clean endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Remapping and reconnecting drives to match precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to demanding payment for a decryption utility, modern strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to steal (or "exfiltrate") information. TAs can then demand an extra ransom for not publishing this data on the dark web. Unfortunately, there is no way to prove that exfiltrated data have been totally erased by the threat actor. In fact, in many instances the hacker has limited control about where the information ends up. Paying an exfiltration ransom does not free you from the need for engaging the advice of privacy attorneys, conducting an audit on which files were stolen, and carrying out the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises network services throughout the U.S. for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned internationally recognized certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial and ERP software. This broad array of skills gives Progent the ability to salvage and consolidate the surviving parts of your network following a ransomware assault and rebuild them quickly into an operational system. Progent has worked with top cyber insurance carriers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Buffalo
To get in touch with Progent about crypto-ransomware settlement expertise in Buffalo, call Progent at 800-462-8800 or go to Contact Progent.