Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Services in Manchester
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated exercise that requires a mix of real-word experience, IT skills and business acumen. It also requires close co-operation with the cyber-extortion target's IT team and the cyber insurance carrier, if any. Because the top priority of the ransomware victim is operational continuity, it is vital to deploy recovery groups that operate efficiently, in parallel, and with intimate collaboration. Progent has the breadth of technical skills and the deep bench of experts to supplement your IT support team and recover your network rapidly and economically.

Services provided by Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware used in the attack
• making contact with the hacker persona
• Evaluating the likelihood of recovery
• Testing the TA's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the insurance carrier
• Establishing a settlement and timeline with the threat actor
• Checking adherence to anti-money laundering (AML) sanctions
• Managing the crypto-currency payment to the TA
• Acquiring, learning, and operating the threat actor's decryption tool
• If necessary, contacting the TA for assistance with the decryption utility

• Isolating infected endpoints to prevent further progress of the attack
• Creating replicas of every infected device and data store to allow forensics in parallel with cleanup
• Installing anti-virus protection to all virus-free endpoints
• Recovering files from air-gapped restores or uncompromised endpoints
• Building a clean environment
• Mapping and reconnecting drives to match precisely their pre-attack state

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") files. TAs can then require an extra settlement in exchange for not publishing this information on the dark web. Sadly, there exists no way to be certain that exfiltrated data have been completely erased by the threat actor. In fact, in many cases the threat actor has limited say over the disposition of the data. Paying an exfiltration ransom does not eliminate the need for seeking the advice of legal counsel, performing an investigation into which files were compromised, and carrying out the required alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and onsite network services throughout the United States for over two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded high-level certifications in foundation technologies such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications including CISA, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This breadth of expertise allows Progent to salvage and consolidate the surviving parts of your IT environment following a ransomware attack and rebuild them rapidly into a viable network. Progent has worked with leading cyber insurance carriers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Services in Manchester
To contact with Progent about ransomware settlement guidance in Manchester, call Progent at 800-462-8800 or go to Contact Progent.