Ransomware Response Consultants

Overview of Progent's Ransomware Negotiation Consulting in Waltham
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex exercise that calls for a combination of real-word experience, technical knowledge and business savvy. It also calls for working closely with the ransomware victim's IT team and the cyber insurance carrier, if any. Because the top priority of the ransomware target is fast recovery, it is critical to deploy response groups that work effectively, concurrently, and with intimate collaboration. Progent offers the breadth of IT skills and the depth of personnel to supplement your IT staff and recover your network quickly and economically.

Support available from Progent's ransomware settlement negotiation experts include:

• Determining the type of ransomware involved in the assault
• Making contact with the hacker persona
• Evaluating the recovery risk
• Validating the hacker's decryption tool
• Deciding on an acceptable settlement range with the victim and the cyber insurance provider
• Negotiating a settlement amount and timeline with the TA
• Checking adherence to anti-money laundering (AML) regulations
• Overseeing the crypto-currency transfer to the TA
• Receiving, learning, and operating the hacker's decryptor utility
• If necessary, contacting the threat actor for technical assistance with the decryptor tool

• Quarantining affected endpoints and data stores to prevent further progress of the attack
• Making digital copies of every compromised server and endpoint and data store in order to perform forensics in parallel with recovery
• Installing A/V agents to all virus-free endpoints
• Restoring data from offline restores or uncompromised machines
• Creating a clean environment
• Mapping and reconnecting datastores to match exactly their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often try to steal (or "exfiltrate") information. TAs can then demand a separate settlement in exchange for not divulging this data on the dark web. Unfortunately, there is no way to prove that exfiltrated files have been completely erased by the threat actor. Actually, in numerous cases the TA has limited say about who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of legal counsel, conducting an inventory of files were taken, and carrying out the necessary alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises IT services throughout the U.S. for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have been awarded high-level certifications in foundation technologies including Cisco infrastructure, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This breadth of expertise gives Progent the ability to identify and integrate the undamaged pieces of your network after a ransomware intrusion and reconstruct them rapidly into a functioning system. Progent has worked with leading cyber insurance carriers like Chubb to assist organizations clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Services in Waltham
To get in touch with Progent about ransomware settlement negotiation expertise in Waltham, call Progent at 800-462-8800 or go to Contact Progent.