Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Consulting in Jersey City
Progent has experience negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated exercise that requires a combination of field experience, technical knowledge and business savvy. It also demands working closely with the ransomware victim's IT staff and the cyber insurance carrier, if there is one. Because the number one goal of the ransomware target is fast recovery, it is critical to deploy response groups that operate effectively, concurrently, and in close communication. Progent has the scope of IT skills and the depth of experts to supplement your IT staff and restore your network environment rapidly and affordably.

Support available from Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the attack
• Making contact with the hacker
• Evaluating the recovery risk
• Verifying the hacker's decryption capabilities
• Deciding on an acceptable settlement with the victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the threat actor
• Verifying accordance with anti-money laundering (AML) sanctions
• Overseeing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the hacker's decryptor utility
• If needed, contacting the TA for assistance with the decryption utility

• Isolating infected endpoints to prevent further progress of the attack
• Creating digital copies of each breached server and endpoint and data store in order to perform forensics without interfering with recovery
• Adding anti-virus agents to all virus-free endpoints
• Salvaging data from air-gapped restores or uncompromised machines
• Creating a pristine recovery environment
• Mapping and connecting datastores to match exactly their pre-encryption state

Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern strains of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often try to steal (or "exfiltrate") files. TAs can then require a separate payment in exchange for not posting this information or selling it. Sadly, there is no way to be certain that exfiltrated data have been totally erased by the TA. Actually, in many cases the TA has limited control over data custody. Paying an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy lawyers, performing an investigation into which files were stolen, and performing the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises IT services throughout the United States for more than 20 years and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded high-level certifications in core technologies including Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This broad array of expertise allows Progent to salvage and integrate the surviving parts of your information system after a ransomware intrusion and rebuild them quickly into a functioning system. Progent has collaborated with top cyber insurance providers like Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Jersey City
To contact with Progent about crypto-ransomware settlement services in Jersey City, call Progent at 800-462-8800 or go to Contact Progent.