Ransomware Response Consulting Services

Progent's Ransomware Negotiation Services in Lower Manhattan
Progent has experience negotiating ransomware settlements with attackers. Reaching an optimum settlement is a complex activity that requires a combination of real-word experience, technical skills and business acumen. It also requires working closely with the cyber-extortion target's IT team and the insurance provider, if there is one. Since the top priority of the ransomware target is operational continuity, it is vital to deploy recovery groups that work efficiently, concurrently, and in close communication. Progent has the breadth of IT knowledge and the deep bench of personnel to supplement your network support team and recover your network environment quickly and economically.

Support provided by Progent's ransomware settlement team include:

• Establishing the kind of ransomware used in the attack
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Validating the threat actor's decryption capabilities
• Agreeing on a settlement range with the victim and the cyber insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Checking adherence to anti-money laundering sanctions
• Carrying out the crypto-currency disbursement to the hacker
• Receiving, learning, and using the hacker's decryption utility
• If needed, contacting the TA for assistance with the decryptor tool

• Isolating affected endpoints and data stores to arrest the progress of the attack
• Making replicas of every compromised device and data store to allow forensics in parallel with cleanup
• Installing anti-virus agents to all virus-free endpoints
• Recovering files from offline backups or unscathed machines
• Creating a pristine environment
• Remapping and connecting datastores to reflect precisely their pre-encryption condition

Paying Exfiltration Ransoms
Beyond demanding money for a decryption utility, current variants of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often try to steal (or "exfiltrate") information. Hackers are then able to require a separate ransom in exchange for not publishing this data or selling it. Unfortunately, there is no way to prove that stolen files have been completely erased by the hacker. In fact, in many instances the threat actor has little say over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy attorneys, performing an audit on which data were compromised, and carrying out the mandated alerts to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered online and on-premises IT services throughout the United States for more than two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes professionals who have been awarded high-level certifications in foundation technologies including Cisco networking, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning applications. This scope of expertise gives Progent the ability to identify and consolidate the undamaged pieces of your IT environment after a ransomware assault and rebuild them quickly into a viable network. Progent has collaborated with leading insurance providers like Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Ransomware Settlement Services in Lower Manhattan
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Lower Manhattan, call Progent at 800-462-8800 or go to Contact Progent.