Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Saddle Brook
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complex activity that requires a mix of real-word experience, IT knowledge and business savvy. It also demands close co-operation with the ransomware victim's IT team and the cyber insurance provider, if there is one. Because the top priority of the ransomware victim is operational continuity, it is vital to establish recovery teams that operate effectively, in parallel, and in close communication. Progent has the breadth of technical knowledge and the depth of experts to complement your IT staff and restore your network quickly and economically.

Services provided by Progent's ransomware settlement negotiation experts include:

• Establishing the type of ransomware involved in the attack
• Making contact with the hacker persona
• Assessing the likelihood of recovery
• Verifying the TA's decryption tool
• Deciding on an acceptable settlement payment with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the TA
• Checking accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the TA
• Receiving, reviewing, and using the hacker's decryption tool
• If needed, contacting the hacker for technical help with the decryptor tool

• Isolating infected endpoints to arrest the progress of the assault
• Creating digital copies of every infected device and data store in order to perform forensics without interfering with cleanup
• Adding A/V agents to all virus-free endpoints
• Restoring data from offline restores or unscathed endpoints
• Building a pristine environment
• Remapping and reconnecting drives to match precisely their pre-encryption condition

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current variants of ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") files. TAs are then able to require a separate ransom in exchange for not divulging this information on the dark web. Sadly, there exists no method to be certain that exfiltrated data have been totally erased by the hacker. In fact, in many instances the threat actor has little control over the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of seeking the advice of privacy attorneys, performing an audit on which data were taken, and performing the necessary notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and on-premises network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in core technologies including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This scope of skills allows Progent to salvage and consolidate the undamaged parts of your network following a ransomware assault and reconstruct them rapidly into a viable network. Progent has worked with top insurance carriers including Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Expertise in Saddle Brook
To contact with Progent about ransomware settlement negotiation guidance in Saddle Brook, phone Progent at 800-462-8800 or go to Contact Progent.