Ransomware Response Services

Overview of Progent's Ransomware Negotiation Services in Los Angeles
Progent has experience negotiating ransomware settlements with threat actors. Reaching an acceptable settlement is a complex exercise that calls for a combination of real-word experience, IT skills and business acumen. It also demands working closely with the victim's IT team and the cyber insurance carrier, if any. Since the top priority of the ransomware target is operational continuity, it is vital to establish response teams that operate effectively, concurrently, and in close communication. Progent has the breadth of IT knowledge and the deep bench of personnel to complement your network staff and restore your network environment quickly and affordably.

Services provided by Progent's ransomware settlement experts include:

• Determining the type of ransomware used in the assault
• Making contact with the hacker persona
• Assessing the likelihood of recovery
• Validating the threat actor's decryption tool
• Agreeing on a settlement range with the victim and the insurance carrier
• Establishing a settlement amount and timeline with the hacker
• Confirming accordance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the hacker
• Receiving, learning, and using the hacker's decryption utility
• If necessary, contacting the threat actor for technical assistance with the decryptor tool

• Isolating infected endpoints to arrest the spread of the assault
• Making digital copies of each infected device and data store to allow forensics without interfering with restoration
• Adding anti-virus agents to all clean endpoints
• Restoring data from air-gapped restores or uncompromised endpoints
• Building a clean recovery environment
• Mapping and connecting datastores to reflect exactly their pre-attack state

Settling Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate information. Hackers are then able to demand an additional ransom for not posting this data on the dark web. Sadly, there is no way to prove that exfiltrated files have been completely erased by the threat actor. In fact, in many instances the hacker has limited say over the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of getting the advice of privacy lawyers, performing an inventory of files were taken, and carrying out the mandated alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has provided remote and on-premises network services throughout the United States for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications including CISA, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning applications. This scope of expertise gives Progent the ability to identify and consolidate the undamaged pieces of your IT environment after a ransomware assault and reconstruct them quickly into an operational system. Progent has collaborated with top insurance providers like Chubb to help businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Guidance in Los Angeles
To get in touch with Progent about crypto-ransomware settlement guidance in Los Angeles, phone Progent at 800-462-8800 or go to Contact Progent.