Ransomware Response Services

Overview of Progent's Ransomware Negotiation Consulting in Beverly Hills
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated activity that calls for a mix of real-word experience, IT knowledge and business acumen. It also requires close co-operation with the cyber-extortion target's IT staff and the insurance provider, if there is one. Since the top priority of the ransomware target is operational continuity, it is vital to deploy recovery teams that operate effectively, in parallel, and with intimate collaboration. Progent has the scope of technical skills and the depth of experts to complement your IT staff and recover your network rapidly and affordably.

Services offered by Progent's ransomware settlement team include:

• Determining the type of ransomware involved in the assault
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Testing the threat actor's decryption tool
• Determining a settlement range with the victim and the cyber insurance provider
• Negotiating a settlement and timeline with the hacker
• Confirming compliance with anti-money laundering (AML) sanctions
• Managing the crypto-currency transfer to the TA
• Receiving, learning, and using the TA's decryption tool
• If necessary, contacting the threat actor for technical assistance with the decryptor tool

• Isolating affected endpoints and data stores to arrest the spread of the assault
• Making replicas of every compromised device and data store to allow forensics in parallel with restoration
• Adding anti-virus protection to all clean endpoints
• Restoring files from offline backups or uncompromised endpoints
• Creating a clean recovery environment
• Remapping and connecting drives to match exactly their pre-attack state

Exfiltration Ransoms
In addition to extorting payment for a decryption tool, modern variants of crypto-ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly attempt to exfiltrate files. Hackers are then able to demand an additional settlement for not publishing this information or selling it. Sadly, there is no method to prove that stolen files have been totally erased by the TA. Actually, in numerous instances the TA has little say over data custody. Settling an exfiltration ransom does not eliminate the need for seeking the guidance of privacy lawyers, performing an audit on which files were compromised, and sending the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has delivered remote and on-premises IT services throughout the U.S. for more than two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in foundation technologies such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned industry-recognized certifications including CISA, CISSP, and CRISC. (See Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning application software. This scope of expertise allows Progent to identify and consolidate the surviving pieces of your information system following a ransomware assault and rebuild them quickly into a functioning network. Progent has worked with leading insurance providers like Chubb to assist businesses clean up after ransomware assaults.

Contact Progent about Ransomware Settlement Expertise in Beverly Hills
To get in touch with Progent about crypto-ransomware settlement guidance in Beverly Hills, call Progent at 800-462-8800 or go to Contact Progent.