Ransomware Response Consulting Experts

Overview of Progent's Ransomware Settlement Negotiation Services in London
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex activity that requires a mix of field experience, technical knowledge and business acumen. It also requires close co-operation with the victim's IT team and the cyber insurance provider, if there is one. Because the top goal of the ransomware victim is operational continuity, it is critical to deploy recovery teams that work efficiently, concurrently, and with intimate collaboration. Progent offers the scope of IT knowledge and the depth of personnel to supplement your IT staff and restore your network quickly and economically.

Support provided by Progent's ransomware negotiation experts include:

• Establishing the type of ransomware used in the assault
• identifying and contacting the hacker
• Assessing the likelihood of recovery
• Testing the threat actor's decryption tool
• Determining a settlement payment with the victim and the insurance provider
• Establishing a settlement and schedule with the hacker
• Checking adherence to anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the TA
• Acquiring, learning, and using the hacker's decryptor utility
• If necessary, contacting the hacker for technical assistance with the decryptor utility

• Quarantining affected endpoints and data stores to prevent further progress of the attack
• Creating replicas of each compromised device and data store in order to perform forensics in parallel with restoration
• Adding A/V protection to all virus-free endpoints
• Salvaging data from offline backups or unscathed machines
• Building a pristine recovery environment
• Remapping and connecting drives to reflect exactly their pre-attack condition

Paying Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern variants of ransomware like Ryuk, Maze, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") files. Hackers are then able to demand an extra payment for not publishing this data or selling it. Sadly, there is no method to prove that exfiltrated files have been completely erased by the hacker. Actually, in many cases the TA has limited say over where the information ends up. Paying an exfiltration ransom does not free you from the need for getting the advice of legal counsel, conducting an audit on which files were taken, and sending the required alerts to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Background
Progent has provided remote and onsite IT services across the United States for over two decades and has earned Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SBEs includes professionals who have been awarded high-level certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, and GIAC. (Refer to Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning software. This scope of skills gives Progent the ability to identify and consolidate the undamaged parts of your information system after a ransomware attack and reconstruct them quickly into an operational system. Progent has collaborated with top cyber insurance providers including Chubb to help businesses clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in London
To contact with Progent about crypto-ransomware settlement guidance in London, call Progent at 800-993-9400 or go to Contact Progent.