Ransomware Response Consulting Services

Overview of Progent's Ransomware Negotiation Consulting in Philadelphia
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an optimum settlement is a complicated activity that requires a combination of real-word experience, IT skills and business acumen. It also calls for close co-operation with the cyber-extortion target's IT team and the insurance provider, if there is one. Since the number one priority of the ransomware victim is operational continuity, it is vital to deploy response groups that operate effectively, concurrently, and with intimate collaboration. Progent has the scope of technical skills and the deep bench of personnel to complement your network staff and recover your network rapidly and affordably.

Support available from Progent's ransomware settlement team include:

• Determining the kind of ransomware involved in the attack
• Identifying and communicating with the hacker persona
• Assessing the likelihood of recovery
• Testing the threat actor's decryption capabilities
• Deciding on an acceptable settlement amount with the victim and the insurance provider
• Negotiating a settlement amount and schedule with the hacker
• Confirming accordance with anti-money laundering (AML) regulations
• Managing the crypto-currency payment to the hacker
• Receiving, learning, and using the TA's decryptor utility
• If necessary, contacting the hacker for technical help with the decryption tool

• Quarantining infected endpoints to prevent further progress of the attack
• Creating replicas of each infected device and data store in order to perform forensics in parallel with recovery
• Installing anti-virus protection to all virus-free endpoints
• Recovering data from offline restores or unscathed machines
• Building a clean recovery environment
• Mapping and reconnecting drives to reflect precisely their pre-attack condition

Exfiltration Ransoms
Beyond demanding money for a decryption utility, modern strains of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often try to exfiltrate information. TAs are then able to require an additional payment in exchange for not posting this data or selling it. Unfortunately, there is no method to guarantee that exfiltrated data have been completely deleted by the TA. In fact, in numerous instances the TA has little control about data custody. Paying an exfiltration ransom does not free you from the necessity of seeking the guidance of privacy attorneys, conducting an investigation into which files were taken, and performing the required notifications to affected entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and on-premises network services across the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned advanced certifications in core technology platforms including Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial management and ERP application software. This scope of skills allows Progent to identify and consolidate the surviving parts of your network following a ransomware assault and rebuild them rapidly into a functioning system. Progent has collaborated with leading insurance providers including Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Philadelphia
To contact with Progent about crypto-ransomware settlement guidance in Philadelphia, phone Progent at 800-462-8800 or go to Contact Progent.