Ransomware Response Services

Progent's Ransomware Settlement Negotiation Consulting in Boston
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complicated activity that requires a combination of field experience, technical knowledge and business acumen. It also calls for close co-operation with the ransomware victim's IT staff and the insurance provider, if there is one. Since the top priority of the ransomware target is operational continuity, it is critical to deploy response groups that operate efficiently, in parallel, and in close communication. Progent has the breadth of technical skills and the depth of experts to complement your IT staff and recover your network quickly and affordably.

Services provided by Progent's ransomware negotiation team include:

• Establishing the kind of ransomware used in the assault
• Identifying and communicating with the hacker persona
• Assessing the recovery risk
• Validating the threat actor's decryption capabilities
• Budgeting a settlement with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and timeline with the threat actor
• Confirming adherence to anti-money laundering (AML) sanctions
• Carrying out the crypto-currency payment to the TA
• Acquiring, reviewing, and using the threat actor's decryption utility
• If necessary, contacting the TA for technical help with the decryptor tool

• Isolating infected endpoints to arrest the progress of the attack
• Creating replicas of every breached server and endpoint and data store in order to perform forensics without interfering with recovery
• Installing A/V protection to all virus-free endpoints
• Recovering files from air-gapped restores or uncompromised endpoints
• Creating a pristine recovery environment
• Remapping and connecting drives to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly try to exfiltrate files. Hackers are then able to demand an additional settlement in exchange for not divulging this information or selling it. Sadly, there is no method to guarantee that exfiltrated files have been completely deleted by the threat actor. In fact, in many instances the hacker has little control over who can access the stolen files. Settling an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, performing an inventory of files were stolen, and sending the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite IT services throughout the United States for more than two decades and has earned Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded high-level certifications in core technology platforms including Cisco networking, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and ERP application software. This scope of skills allows Progent to identify and consolidate the undamaged parts of your information system after a ransomware intrusion and reconstruct them quickly into a functioning system. Progent has collaborated with leading cyber insurance carriers including Chubb to assist organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Boston
To get in touch with Progent about ransomware settlement negotiation guidance in Boston, call Progent at 800-462-8800 or go to Contact Progent.