Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in London
Progent is experienced in negotiating ransomware settlements with threat actors (TAs). Negotiating an optimum settlement is a complicated activity that requires a mix of real-word experience, technical knowledge and business acumen. It also requires working closely with the ransomware victim's IT staff and the insurance carrier, if any. Since the number one priority of the ransomware target is fast recovery, it is vital to establish recovery groups that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of technical skills and the deep bench of personnel to supplement your network support team and recover your network quickly and affordably.

Services offered by Progent's ransomware settlement experts include:

• Determining the type of ransomware involved in the attack
• making contact with the hacker
• Assessing the recovery risk
• Validating the threat actor's decryption capabilities
• Agreeing on a settlement range with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the TA
• Checking adherence to anti-money laundering laws
• Overseeing the crypto-currency disbursement to the hacker
• Receiving, learning, and using the TA's decryptor tool
• If necessary, contacting the TA for technical help with the decryption utility

• Isolating affected endpoints to arrest the progress of the attack
• Creating digital copies of every compromised device and data store to allow forensics without interfering with cleanup
• Adding A/V agents to all clean endpoints
• Recovering data from offline backups or unscathed machines
• Building a pristine recovery environment
• Mapping and reconnecting datastores to reflect precisely their pre-encryption state

Settling Exfiltration Ransoms
In addition to extorting money for a decryption utility, current variants of ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to steal (or "exfiltrate") files. TAs can then demand an extra ransom in exchange for not publishing this information or selling it. Unfortunately, there exists no method to prove that stolen files have been totally deleted by the TA. In fact, in many cases the hacker has limited control over data custody. Paying an exfiltration ransom does not eliminate the need for getting the guidance of legal counsel, performing an investigation into which files were taken, and performing the required notifications to affected entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and on-premises IT services across the U.S. for more than two decades and has been awarded Microsoft's Gold Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in core technology platforms including Cisco infrastructure, VMware, and popular Linux distros. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP, and GIAC. (See certifications earned by Progent consultants). Progent also has guidance in financial management and Enterprise Resource Planning applications. This breadth of skills gives Progent the ability to identify and integrate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them quickly into a viable system. Progent has collaborated with top cyber insurance providers including Chubb to help organizations recover from ransomware attacks.

Contact Progent about Ransomware Settlement Guidance in London
To get in touch with Progent about ransomware settlement negotiation services in London, phone Progent at 800-462-8800 or go to Contact Progent.