Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Beverly Hills
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an acceptable settlement is a complex exercise that requires a combination of real-word experience, IT skills and business acumen. It also demands close co-operation with the victim's IT staff and the cyber insurance provider, if there is one. Since the number one priority of the ransomware victim is fast recovery, it is critical to establish response teams that work efficiently, in parallel, and in close communication. Progent has the scope of technical knowledge and the depth of personnel to supplement your IT support team and recover your network rapidly and economically.

Services provided by Progent's ransomware settlement negotiation experts include:

• Determining the kind of ransomware used in the attack
• identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Verifying the threat actor's decryption tool
• Budgeting a settlement amount with the victim and the cyber insurance provider
• Establishing a settlement amount and timeline with the hacker
• Verifying compliance with anti-money laundering sanctions
• Managing the crypto-currency disbursement to the TA
• Receiving, learning, and operating the TA's decryption mechanism
• If needed, contacting the threat actor for assistance with the decryption tool

• Isolating infected endpoints to prevent further progress of the attack
• Making replicas of each breached device and data store to allow forensics in parallel with restoration
• Installing A/V protection to all virus-free endpoints
• Recovering files from air-gapped backups or unscathed machines
• Creating a clean recovery environment
• Remapping and connecting datastores to reflect exactly their pre-encryption condition

Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") files. Hackers are then able to demand an extra payment for not posting this information or selling it. Unfortunately, there is no way to prove that exfiltrated files have been totally erased by the TA. Actually, in numerous instances the threat actor has limited control about the disposition of the data. Paying an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy attorneys, performing an inventory of files were compromised, and sending the necessary notifications to affected entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and onsite network services throughout the United States for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes professionals who have earned high-level certifications in core technologies including Cisco networking, VMware, and popular Linux distros. Progent's data security experts have earned industry-recognized certifications such as CISM, CISSP, and GIAC. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and ERP application software. This breadth of expertise gives Progent the ability to identify and integrate the surviving pieces of your information system following a ransomware assault and reconstruct them quickly into a viable network. Progent has worked with leading cyber insurance providers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in Beverly Hills
To get in touch with Progent about ransomware settlement guidance in Beverly Hills, call Progent at 800-462-8800 or go to Contact Progent.