Ransomware Solutions Consultants

Overview of Progent's Ransomware Negotiation Consulting in London
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complex exercise that calls for a mix of real-word experience, IT skills and business savvy. It also demands close co-operation with the victim's IT team and the insurance carrier, if there is one. Since the number one goal of the ransomware target is fast recovery, it is critical to establish recovery teams that work efficiently, in parallel, and with intimate collaboration. Progent has the scope of IT knowledge and the depth of experts to supplement your IT support team and recover your network environment rapidly and affordably.

Support available from Progent's ransomware negotiation experts include:

• Determining the kind of ransomware involved in the attack
• identifying and contacting the hacker persona
• Assessing the likelihood of recovery
• Verifying the TA's decryption tool
• Agreeing on a settlement payment with the victim and the cyber insurance carrier
• Establishing a settlement and schedule with the threat actor
• Verifying compliance with anti-money laundering (AML) sanctions
• Overseeing the crypto-currency payment to the TA
• Receiving, reviewing, and using the threat actor's decryptor mechanism
• If necessary, contacting the hacker for technical help with the decryption tool

• Isolating infected endpoints to arrest the progress of the attack
• Creating digital copies of each infected device and data store to allow forensics in parallel with restoration
• Adding A/V protection to all virus-free endpoints
• Restoring data from offline restores or unscathed endpoints
• Creating a clean recovery environment
• Remapping and connecting datastores to reflect precisely their pre-encryption condition

Paying Exfiltration Ransoms
Beyond demanding payment for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to exfiltrate files. Hackers are then able to require a separate ransom for not publishing this information on the dark web. Sadly, there exists no way to guarantee that exfiltrated files have been completely erased by the threat actor. Actually, in many cases the hacker has little control over who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of engaging the advice of privacy attorneys, conducting an audit on which files were compromised, and performing the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has delivered online and onsite network services throughout the U.S. for over 20 years and has been awarded Microsoft's Gold Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in foundation technology platforms such as Cisco networking, VMware, and popular distributions of Linux. Progent's data security experts have earned prestigious certifications including CISA, CISSP-ISSAP, and CRISC. (Refer to Progent's certifications). Progent also offers guidance in financial management and ERP software. This broad array of skills allows Progent to identify and consolidate the undamaged parts of your network after a ransomware intrusion and rebuild them quickly into a viable system. Progent has collaborated with leading cyber insurance carriers including Chubb to help businesses recover from ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Services in London
To get in touch with Progent about ransomware settlement negotiation expertise in London, phone Progent at 800-462-8800 or go to Contact Progent.