Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Services in Allentown
Progent has experience negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complicated activity that calls for a mix of field experience, technical knowledge and business savvy. It also demands close co-operation with the ransomware victim's IT team and the insurance carrier, if there is one. Because the number one priority of the ransomware victim is operational continuity, it is vital to deploy response teams that operate efficiently, concurrently, and in close communication. Progent offers the scope of technical knowledge and the depth of experts to supplement your IT support team and recover your network rapidly and economically.

Services available from Progent's ransomware negotiation experts include:

• Determining the type of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Validating the TA's decryption tool
• Determining a settlement range with the victim and the insurance provider
• Negotiating a settlement and schedule with the threat actor
• Confirming adherence to anti-money laundering regulations
• Overseeing the crypto-currency disbursement to the TA
• Acquiring, learning, and operating the TA's decryption mechanism
• If necessary, contacting the threat actor for technical help with the decryption utility

• Isolating infected endpoints to prevent further spread of the assault
• Creating replicas of every infected server and endpoint and data store to allow forensics in parallel with cleanup
• Adding anti-virus agents to all virus-free endpoints
• Salvaging data from offline backups or unscathed endpoints
• Building a pristine environment
• Remapping and connecting drives to reflect exactly their pre-attack condition

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, current strains of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor often try to exfiltrate information. TAs can then require a separate settlement in exchange for not posting this information or selling it. Unfortunately, there exists no method to guarantee that stolen data have been completely deleted by the threat actor. Actually, in many cases the TA has limited say over data custody. Settling an exfiltration ransom does not free you from the necessity of seeking the guidance of legal counsel, conducting an audit on which files were compromised, and carrying out the necessary notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services throughout the U.S. for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded high-level certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications including CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This broad array of expertise allows Progent to identify and consolidate the surviving pieces of your IT environment following a ransomware intrusion and reconstruct them quickly into a viable network. Progent has collaborated with leading cyber insurance providers like Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Services in Allentown
To get in touch with Progent about crypto-ransomware settlement negotiation services in Allentown, phone Progent at 800-462-8800 or go to Contact Progent.