Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Pittsburgh
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex activity that calls for a combination of real-word experience, IT knowledge and business acumen. It also requires working closely with the cyber-extortion target's IT team and the insurance carrier, if there is one. Since the number one priority of the ransomware victim is operational continuity, it is vital to establish recovery teams that work efficiently, in parallel, and in close communication. Progent offers the breadth of IT skills and the deep bench of experts to complement your IT support team and restore your network environment rapidly and economically.

Support offered by Progent's ransomware negotiation team include:

• Establishing the type of ransomware used in the attack
• Identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Determining a settlement range with the ransomware victim and the insurance carrier
• Negotiating a settlement amount and timeline with the threat actor
• Checking accordance with anti-money laundering sanctions
• Overseeing the crypto-currency transfer to the TA
• Acquiring, learning, and operating the threat actor's decryption mechanism
• If necessary, contacting the TA for technical help with the decryption tool

• Quarantining infected endpoints to arrest the progress of the assault
• Making replicas of every breached device and data store to allow forensics in parallel with restoration
• Adding A/V agents to all virus-free endpoints
• Restoring data from air-gapped restores or uncompromised endpoints
• Creating a pristine recovery environment
• Mapping and connecting drives to match exactly their pre-attack state

Settling Exfiltration Ransoms
Beyond demanding payment for a decryption tool, current strains of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate information. Hackers can then require an additional settlement in exchange for not posting this information on the dark web. Sadly, there exists no way to be certain that exfiltrated data have been totally deleted by the threat actor. Actually, in numerous cases the threat actor has little control over who can access the stolen files. Settling an exfiltration ransom does not eliminate the need for engaging the advice of privacy lawyers, conducting an investigation into which data were compromised, and carrying out the required alerts to impacted entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered remote and on-premises network services across the United States for more than two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have been awarded advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP applications. This broad array of expertise gives Progent the ability to salvage and integrate the undamaged pieces of your IT environment following a ransomware intrusion and rebuild them rapidly into a functioning system. Progent has collaborated with leading cyber insurance providers like Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Pittsburgh
To contact with Progent about crypto-ransomware settlement negotiation guidance in Pittsburgh, phone Progent at 800-462-8800 or go to Contact Progent.