Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Services in Edison
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated exercise that calls for a mix of real-word experience, technical knowledge and business acumen. It also demands close co-operation with the cyber-extortion target's IT staff and the insurance carrier, if any. Because the number one goal of the ransomware target is fast recovery, it is vital to deploy recovery teams that work effectively, in parallel, and with intimate collaboration. Progent has the breadth of IT skills and the deep bench of experts to supplement your IT support team and restore your network environment rapidly and affordably.

Support available from Progent's ransomware settlement experts include:

• Determining the kind of ransomware used in the attack
• Making contact with the hacker persona
• Assessing the recovery risk
• Testing the hacker's decryption capabilities
• Determining a settlement with the victim and the cyber insurance carrier
• Negotiating a settlement amount and schedule with the threat actor
• Verifying adherence to anti-money laundering (AML) sanctions
• Overseeing the crypto-currency disbursement to the hacker
• Acquiring, learning, and using the threat actor's decryption mechanism
• If needed, contacting the hacker for technical help with the decryptor utility

• Isolating infected endpoints and data stores to prevent further spread of the assault
• Making replicas of each infected device and data store in order to perform forensics without interfering with cleanup
• Installing anti-virus agents to all virus-free endpoints
• Restoring data from offline restores or unscathed machines
• Building a pristine recovery environment
• Mapping and connecting drives to match precisely their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current variants of crypto-ransomware like Ryuk, Maze, Netwalker, and Nephilim often attempt to exfiltrate files. TAs are then able to require an extra payment in exchange for not divulging this data on the dark web. Sadly, there exists no method to prove that stolen data have been totally deleted by the hacker. In fact, in many cases the hacker has limited say over data custody. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy lawyers, performing an audit on which data were stolen, and performing the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered remote and on-premises IT services across the U.S. for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have earned advanced certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's cybersecurity experts have earned industry-recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This broad array of expertise gives Progent the ability to salvage and integrate the undamaged parts of your network following a ransomware intrusion and rebuild them rapidly into a functioning system. Progent has worked with top cyber insurance carriers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Services in Edison
To contact with Progent about crypto-ransomware settlement negotiation guidance in Edison, call Progent at 800-462-8800 or go to Contact Progent.