Ransomware Solutions Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Newark
Progent is experienced in negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complex activity that calls for a mix of field experience, technical skills and business acumen. It also calls for working closely with the cyber-extortion target's IT team and the insurance carrier, if there is one. Since the top priority of the ransomware target is fast recovery, it is critical to establish response teams that work effectively, concurrently, and with intimate collaboration. Progent offers the breadth of technical skills and the depth of personnel to complement your network support team and recover your network environment quickly and economically.

Support available from Progent's ransomware settlement team include:

• Determining the type of ransomware used in the assault
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Verifying the hacker's decryption capabilities
• Agreeing on a settlement with the victim and the cyber insurance carrier
• Negotiating a settlement and timeline with the threat actor
• Verifying adherence to anti-money laundering sanctions
• Overseeing the crypto-currency payment to the hacker
• Acquiring, learning, and operating the hacker's decryptor mechanism
• If necessary, contacting the TA for technical help with the decryptor tool

• Isolating infected endpoints to prevent further progress of the attack
• Creating replicas of each infected device and data store in order to perform forensics in parallel with recovery
• Adding anti-virus protection to all clean endpoints
• Recovering files from air-gapped restores or uncompromised machines
• Building a clean environment
• Mapping and connecting datastores to reflect precisely their pre-attack condition

Exfiltration Ransoms
Beyond extorting money for a decryption tool, current variants of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. Hackers are then able to require a separate settlement for not publishing this information or selling it. Unfortunately, there exists no way to be certain that exfiltrated files have been completely erased by the threat actor. Actually, in many instances the threat actor has little control about the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of seeking the guidance of privacy attorneys, conducting an investigation into which files were compromised, and carrying out the required notifications to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in core technology platforms such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security experts have earned prestigious certifications such as CISA, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning applications. This scope of expertise gives Progent the ability to salvage and integrate the undamaged pieces of your IT environment after a ransomware assault and rebuild them quickly into a functioning network. Progent has collaborated with leading cyber insurance carriers including Chubb to help organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Services in Newark
To get in touch with Progent about ransomware settlement guidance in Newark, call Progent at 800-462-8800 or go to Contact Progent.