Ransomware Response Services

Progent's Ransomware Negotiation Services in Lower Manhattan
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complicated activity that calls for a mix of real-word experience, IT knowledge and business acumen. It also demands working closely with the victim's IT team and the cyber insurance carrier, if there is one. Since the top priority of the ransomware target is fast recovery, it is critical to establish recovery groups that operate efficiently, concurrently, and with intimate collaboration. Progent has the breadth of technical knowledge and the deep bench of experts to complement your network staff and recover your network environment quickly and affordably.

Support offered by Progent's ransomware negotiation experts include:

• Determining the kind of ransomware used in the assault
• Identifying and contacting the hacker
• Evaluating the likelihood of recovery
• Validating the TA's decryption capabilities
• Deciding on an acceptable settlement amount with the ransomware victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the hacker
• Confirming accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the TA
• Acquiring, learning, and operating the TA's decryption mechanism
• If necessary, contacting the hacker for technical help with the decryption tool

• Isolating infected endpoints to arrest the spread of the assault
• Making digital copies of every infected server and endpoint and data store in order to perform forensics in parallel with restoration
• Installing A/V agents to all clean endpoints
• Salvaging data from air-gapped backups or uncompromised machines
• Creating a clean environment
• Mapping and reconnecting drives to reflect precisely their pre-attack condition

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption utility, modern variants of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor often attempt to exfiltrate files. Hackers are then able to demand an extra settlement for not divulging this information on the dark web. Unfortunately, there is no method to guarantee that exfiltrated data have been totally erased by the hacker. Actually, in numerous cases the threat actor has little say over where the information ends up. Paying an exfiltration ransom does not free you from the need for getting the advice of legal counsel, conducting an audit on which files were compromised, and carrying out the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided remote and on-premises IT services across the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have been awarded high-level certifications in foundation technologies including Cisco infrastructure, VMware, and major distributions of Linux. Progent's data security experts have earned industry-recognized certifications including CISA, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial management and Enterprise Resource Planning application software. This breadth of skills gives Progent the ability to identify and consolidate the surviving pieces of your IT environment after a ransomware intrusion and rebuild them quickly into a viable network. Progent has collaborated with top insurance providers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Lower Manhattan
To contact with Progent about ransomware settlement negotiation services in Lower Manhattan, call Progent at 800-462-8800 or go to Contact Progent.