Ransomware Response Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Jersey City
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex activity that requires a combination of field experience, technical knowledge and business savvy. It also calls for working closely with the victim's IT team and the cyber insurance provider, if any. Since the top goal of the ransomware victim is fast recovery, it is vital to establish response groups that work efficiently, concurrently, and with intimate collaboration. Progent offers the scope of technical knowledge and the depth of experts to complement your network staff and recover your network environment quickly and affordably.

Support offered by Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the assault
• Making contact with the hacker
• Assessing the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Agreeing on a settlement range with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the threat actor
• Checking adherence to anti-money laundering laws
• Managing the crypto-currency disbursement to the TA
• Receiving, reviewing, and operating the TA's decryption mechanism
• If necessary, contacting the hacker for assistance with the decryption utility

• Quarantining affected endpoints and data stores to prevent further progress of the assault
• Making replicas of each infected server and endpoint and data store to allow forensics in parallel with recovery
• Installing anti-virus protection to all clean endpoints
• Restoring files from air-gapped restores or unscathed machines
• Creating a pristine environment
• Mapping and reconnecting datastores to reflect precisely their pre-encryption condition

Paying Exfiltration Ransoms
Beyond demanding money for a decryption tool, current strains of ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often attempt to steal (or "exfiltrate") files. Hackers can then demand an extra payment in exchange for not divulging this information or selling it. Sadly, there is no method to guarantee that exfiltrated files have been completely deleted by the TA. In fact, in numerous instances the hacker has little say over the disposition of the data. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, conducting an investigation into which files were stolen, and sending the required alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite network services throughout the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have earned high-level certifications in core technology platforms such as Cisco infrastructure, VMware, and popular distributions of Linux. Progent's data security experts have earned prestigious certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and Enterprise Resource Planning applications. This breadth of skills gives Progent the ability to identify and consolidate the surviving parts of your information system following a ransomware intrusion and rebuild them quickly into a viable network. Progent has worked with leading insurance providers like Chubb to assist organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Expertise in Jersey City
To get in touch with Progent about ransomware settlement negotiation guidance in Jersey City, call Progent at 800-462-8800 or go to Contact Progent.