Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Consulting in Brooklyn
Progent has experience negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complex exercise that calls for a combination of real-word experience, technical skills and business acumen. It also calls for working closely with the cyber-extortion target's IT team and the insurance carrier, if there is one. Because the number one priority of the ransomware victim is fast recovery, it is vital to establish response teams that operate effectively, in parallel, and in close communication. Progent offers the breadth of technical skills and the deep bench of personnel to supplement your network staff and recover your network environment quickly and affordably.

Services available from Progent's ransomware negotiation team include:

• Determining the kind of ransomware used in the attack
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Validating the threat actor's decryption capabilities
• Determining a settlement amount with the victim and the insurance provider
• Negotiating a settlement and timeline with the hacker
• Confirming compliance with anti-money laundering regulations
• Managing the crypto-currency payment to the TA
• Receiving, reviewing, and using the hacker's decryption tool
• If needed, contacting the hacker for technical assistance with the decryption utility

• Quarantining affected endpoints and data stores to prevent further progress of the attack
• Making replicas of each breached device and data store to allow forensics in parallel with restoration
• Installing anti-virus agents to all clean endpoints
• Recovering files from air-gapped backups or uncompromised endpoints
• Creating a clean recovery environment
• Remapping and reconnecting drives to reflect exactly their pre-attack condition

Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate information. Hackers can then require a separate ransom in exchange for not posting this information on the dark web. Sadly, there is no way to guarantee that stolen data have been totally deleted by the TA. Actually, in many instances the threat actor has limited control about who can access the stolen files. Settling an exfiltration ransom does not eliminate the need for getting the advice of privacy lawyers, conducting an investigation into which files were stolen, and sending the required alerts to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and onsite network services throughout the United States for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned advanced certifications in foundation technologies including Cisco networking, VMware, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning software. This broad array of skills allows Progent to identify and integrate the undamaged pieces of your information system after a ransomware assault and rebuild them quickly into a viable system. Progent has collaborated with leading insurance carriers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Expertise in Brooklyn
To contact with Progent about ransomware settlement negotiation guidance in Brooklyn, call Progent at 800-462-8800 or go to Contact Progent.