Ransomware Solutions Services

Overview of Progent's Ransomware Negotiation Consulting in Beverly Hills
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complex activity that requires a mix of real-word experience, IT skills and business savvy. It also requires close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if any. Because the number one goal of the ransomware victim is operational continuity, it is vital to establish recovery groups that operate efficiently, concurrently, and in close communication. Progent has the breadth of IT skills and the depth of experts to complement your network support team and recover your network environment quickly and economically.

Support offered by Progent's ransomware settlement experts include:

• Determining the kind of ransomware involved in the assault
• Identifying and communicating with the hacker persona
• Evaluating the recovery risk
• Validating the threat actor's decryption tool
• Deciding on an acceptable settlement payment with the ransomware victim and the cyber insurance provider
• Negotiating a settlement and timeline with the hacker
• Checking adherence to anti-money laundering sanctions
• Managing the crypto-currency payment to the TA
• Receiving, learning, and operating the threat actor's decryption mechanism
• If necessary, contacting the TA for assistance with the decryption utility

• Isolating infected endpoints to arrest the spread of the attack
• Making replicas of every compromised device and data store in order to perform forensics without interfering with cleanup
• Installing anti-virus protection to all virus-free endpoints
• Recovering files from air-gapped restores or unscathed machines
• Creating a clean recovery environment
• Remapping and reconnecting drives to match exactly their pre-encryption state

Paying Exfiltration Ransoms
Beyond extorting money for a decryption utility, current variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate files. TAs can then demand a separate settlement in exchange for not divulging this information or selling it. Unfortunately, there exists no method to guarantee that exfiltrated data have been completely deleted by the TA. Actually, in many cases the threat actor has little say over data custody. Paying an exfiltration ransom does not free you from the need for engaging the guidance of legal counsel, conducting an investigation into which files were stolen, and sending the necessary notifications to impacted entities. In almost all cases, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided online and on-premises IT services across the U.S. for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have been awarded advanced certifications in foundation technologies such as Cisco networking, VMware, and major Linux distros. Progent's data security consultants have earned prestigious certifications such as CISA, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This broad array of expertise allows Progent to salvage and integrate the surviving parts of your information system after a ransomware assault and rebuild them rapidly into a viable network. Progent has worked with leading cyber insurance providers including Chubb to help businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Beverly Hills
To contact with Progent about ransomware settlement expertise in Beverly Hills, call Progent at 800-462-8800 or go to Contact Progent.