Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Services in Albany
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complicated exercise that requires a mix of field experience, IT skills and business savvy. It also calls for working closely with the victim's IT team and the cyber insurance carrier, if any. Since the number one goal of the ransomware target is fast recovery, it is critical to establish response groups that operate effectively, concurrently, and in close communication. Progent has the scope of technical knowledge and the deep bench of experts to complement your IT staff and recover your network environment rapidly and economically.

Support provided by Progent's ransomware settlement team include:

• Establishing the kind of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Deciding on an acceptable settlement with the ransomware victim and the insurance provider
• Establishing a settlement amount and timeline with the hacker
• Checking adherence to anti-money laundering sanctions
• Managing the crypto-currency transfer to the TA
• Receiving, reviewing, and operating the TA's decryption mechanism
• If necessary, contacting the TA for technical assistance with the decryptor tool

• Quarantining infected endpoints to arrest the progress of the attack
• Making replicas of every infected device and data store in order to perform forensics in parallel with recovery
• Installing A/V protection to all virus-free endpoints
• Restoring data from offline backups or unscathed machines
• Creating a clean environment
• Mapping and reconnecting drives to match precisely their pre-encryption condition

Settling Exfiltration Ransoms
Beyond extorting money for a decryption utility, current variants of ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to steal (or "exfiltrate") information. TAs are then able to require an extra settlement for not publishing this data or selling it. Unfortunately, there is no method to prove that stolen data have been completely deleted by the threat actor. Actually, in many cases the threat actor has little say over where the information ends up. Paying an exfiltration ransom does not free you from the need for seeking the guidance of privacy lawyers, performing an investigation into which files were stolen, and carrying out the necessary alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises network services throughout the U.S. for more than 20 years and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technology platforms including Cisco networking, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This scope of skills allows Progent to salvage and consolidate the surviving pieces of your network after a ransomware attack and rebuild them rapidly into a viable network. Progent has collaborated with top cyber insurance providers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Guidance in Albany
To contact with Progent about crypto-ransomware settlement services in Albany, phone Progent at 800-462-8800 or go to Contact Progent.