Ransomware Solutions Consultants

Overview of Progent's Ransomware Settlement Negotiation Consulting in Edison
Progent has experience negotiating ransomware settlements with attackers. Reaching an acceptable settlement is a complicated activity that requires a mix of field experience, IT knowledge and business savvy. It also requires close co-operation with the ransomware victim's IT team and the cyber insurance carrier, if any. Because the number one priority of the ransomware victim is fast recovery, it is critical to establish recovery teams that work effectively, in parallel, and with intimate collaboration. Progent offers the breadth of IT skills and the depth of experts to complement your IT staff and recover your network rapidly and economically.

Support provided by Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware involved in the attack
• Making contact with the hacker
• Evaluating the likelihood of recovery
• Validating the hacker's decryption tool
• Budgeting a settlement with the ransomware victim and the insurance carrier
• Establishing a settlement and timeline with the threat actor
• Verifying accordance with anti-money laundering laws
• Managing the crypto-currency disbursement to the TA
• Acquiring, reviewing, and operating the TA's decryption mechanism
• If needed, contacting the hacker for technical assistance with the decryptor utility

• Isolating affected endpoints to arrest the progress of the assault
• Making digital copies of every compromised device and data store in order to perform forensics in parallel with restoration
• Installing anti-virus protection to all clean endpoints
• Salvaging data from air-gapped restores or unscathed machines
• Creating a pristine recovery environment
• Remapping and reconnecting datastores to match exactly their pre-attack condition

Exfiltration Ransoms
Beyond demanding money for a decryption utility, current strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") files. TAs are then able to demand an additional settlement for not posting this information on the dark web. Unfortunately, there exists no method to be certain that stolen data have been completely deleted by the TA. Actually, in many cases the TA has little say about the disposition of the data. Settling an exfiltration ransom does not eliminate the necessity of seeking the guidance of legal counsel, conducting an audit on which data were compromised, and sending the mandated alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered online and onsite network services across the U.S. for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in core technologies including Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning applications. This scope of skills allows Progent to identify and integrate the surviving parts of your information system following a ransomware attack and rebuild them rapidly into an operational network. Progent has collaborated with top insurance carriers including Chubb to help businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Edison
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Edison, call Progent at 800-462-8800 or go to Contact Progent.