Ransomware Response Services

Overview of Progent's Ransomware Settlement Negotiation Services in Midtown Manhattan
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complicated exercise that calls for a mix of real-word experience, IT knowledge and business savvy. It also calls for working closely with the ransomware victim's IT staff and the insurance carrier, if any. Since the top priority of the ransomware victim is operational continuity, it is critical to establish response teams that work effectively, in parallel, and with intimate collaboration. Progent offers the scope of IT skills and the deep bench of personnel to supplement your IT support team and restore your network quickly and affordably.

Support available from Progent's ransomware settlement experts include:

• Establishing the type of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Evaluating the likelihood of recovery
• Validating the hacker's decryption tool
• Deciding on an acceptable settlement range with the ransomware victim and the insurance carrier
• Establishing a settlement and schedule with the TA
• Confirming adherence to anti-money laundering (AML) sanctions
• Carrying out the crypto-currency payment to the TA
• Acquiring, learning, and operating the threat actor's decryptor tool
• If needed, contacting the TA for assistance with the decryptor tool

• Quarantining affected endpoints and data stores to prevent further progress of the attack
• Making replicas of every breached server and endpoint and data store to allow forensics in parallel with restoration
• Adding A/V agents to all clean endpoints
• Salvaging data from offline restores or uncompromised endpoints
• Building a pristine recovery environment
• Mapping and reconnecting drives to match precisely their pre-encryption state

Exfiltration Ransoms
In addition to demanding money for a decryption utility, modern strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to steal (or "exfiltrate") information. Hackers can then require a separate settlement for not publishing this data or selling it. Unfortunately, there is no method to prove that stolen files have been completely deleted by the TA. Actually, in many instances the hacker has little say about who can access the stolen files. Paying an exfiltration ransom does not free you from the need for engaging the guidance of privacy attorneys, performing an inventory of files were taken, and carrying out the mandated notifications to affected entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided online and onsite IT services across the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have been awarded high-level certifications in foundation technologies such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and ERP software. This scope of expertise allows Progent to salvage and consolidate the surviving pieces of your IT environment after a ransomware intrusion and rebuild them quickly into a viable network. Progent has collaborated with top insurance carriers like Chubb to help businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Services in Midtown Manhattan
To contact with Progent about crypto-ransomware settlement services in Midtown Manhattan, phone Progent at 800-462-8800 or go to Contact Progent.