Ransomware Solutions Consulting Services

Overview of Progent's Ransomware Settlement Negotiation Consulting in Sherman Oaks
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex activity that requires a mix of real-word experience, technical skills and business savvy. It also requires working closely with the victim's IT staff and the insurance provider, if there is one. Since the top priority of the ransomware target is fast recovery, it is vital to deploy response groups that operate efficiently, in parallel, and in close communication. Progent has the scope of technical knowledge and the deep bench of experts to complement your IT support team and restore your network environment quickly and affordably.

Services provided by Progent's ransomware settlement team include:

• Establishing the kind of ransomware involved in the attack
• Identifying and communicating with the hacker
• Assessing the likelihood of recovery
• Validating the TA's decryption tool
• Agreeing on a settlement amount with the ransomware victim and the insurance carrier
• Establishing a settlement and schedule with the hacker
• Checking adherence to anti-money laundering (AML) sanctions
• Carrying out the crypto-currency transfer to the TA
• Acquiring, learning, and using the threat actor's decryption mechanism
• If needed, contacting the threat actor for technical assistance with the decryptor utility

• Quarantining infected endpoints to prevent further spread of the assault
• Creating digital copies of each infected device and data store to allow forensics in parallel with cleanup
• Adding A/V protection to all clean endpoints
• Recovering data from air-gapped backups or uncompromised machines
• Building a pristine recovery environment
• Remapping and reconnecting drives to match exactly their pre-attack state

Paying Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly try to exfiltrate information. Hackers can then demand an extra ransom for not publishing this information on the dark web. Sadly, there exists no way to prove that exfiltrated data have been completely deleted by the hacker. In fact, in many instances the threat actor has little control about the disposition of the data. Settling an exfiltration ransom does not free you from the need for getting the guidance of privacy attorneys, performing an inventory of data were compromised, and sending the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Background
Progent has provided online and onsite IT services across the United States for more than 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded high-level certifications in foundation technology platforms including Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and ERP software. This breadth of expertise allows Progent to salvage and integrate the surviving pieces of your information system after a ransomware intrusion and reconstruct them rapidly into a functioning network. Progent has worked with leading cyber insurance providers like Chubb to assist organizations recover from ransomware assaults.

Contact Progent about Ransomware Settlement Negotiation Services in Sherman Oaks
To get in touch with Progent about crypto-ransomware settlement negotiation expertise in Sherman Oaks, call Progent at 800-462-8800 or go to Contact Progent.