Ransomware Solutions Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in Midtown Manhattan
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex activity that calls for a combination of real-word experience, IT knowledge and business savvy. It also requires working closely with the cyber-extortion target's IT staff and the cyber insurance carrier, if any. Because the number one goal of the ransomware victim is operational continuity, it is vital to deploy response teams that operate effectively, in parallel, and in close communication. Progent has the breadth of technical skills and the deep bench of personnel to complement your network support team and restore your network quickly and affordably.

Services provided by Progent's ransomware settlement negotiation team include:

• Establishing the kind of ransomware used in the attack
• identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Agreeing on a settlement amount with the victim and the insurance carrier
• Negotiating a settlement amount and timeline with the TA
• Confirming adherence to anti-money laundering laws
• Overseeing the crypto-currency transfer to the hacker
• Acquiring, reviewing, and operating the TA's decryptor tool
• If needed, contacting the hacker for technical help with the decryptor utility

• Quarantining infected endpoints and data stores to arrest the spread of the assault
• Creating replicas of every breached device and data store to allow forensics in parallel with restoration
• Adding anti-virus protection to all virus-free endpoints
• Salvaging data from air-gapped restores or uncompromised endpoints
• Building a clean environment
• Mapping and reconnecting datastores to reflect precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption utility, modern strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to steal (or "exfiltrate") files. TAs are then able to demand a separate ransom for not posting this data on the dark web. Sadly, there exists no way to prove that exfiltrated data have been completely deleted by the TA. In fact, in numerous cases the hacker has little say over the disposition of the data. Settling an exfiltration ransom does not eliminate the need for getting the guidance of legal counsel, conducting an investigation into which data were stolen, and carrying out the required notifications to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and on-premises IT services throughout the U.S. for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in foundation technologies including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications such as CISM, CISSP-ISSAP, and GIAC. (See Progent's certifications). Progent also offers top-tier support in financial management and Enterprise Resource Planning application software. This breadth of expertise allows Progent to salvage and integrate the surviving pieces of your IT environment after a ransomware assault and reconstruct them quickly into a viable system. Progent has collaborated with leading insurance carriers including Chubb to assist businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Midtown Manhattan
To get in touch with Progent about ransomware settlement guidance in Midtown Manhattan, call Progent at 800-462-8800 or go to Contact Progent.