Ransomware Response Consulting Experts

Progent's Ransomware Negotiation Consulting in Beverly Hills
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an optimum settlement is a complex exercise that requires a mix of field experience, IT knowledge and business acumen. It also demands close co-operation with the victim's IT staff and the cyber insurance carrier, if there is one. Because the number one goal of the ransomware target is fast recovery, it is vital to deploy recovery teams that operate efficiently, concurrently, and in close communication. Progent offers the breadth of technical skills and the deep bench of experts to complement your network staff and recover your network rapidly and economically.

Support provided by Progent's ransomware settlement team include:

• Determining the type of ransomware involved in the assault
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Testing the threat actor's decryption tool
• Determining a settlement with the victim and the insurance carrier
• Negotiating a settlement and schedule with the hacker
• Confirming accordance with anti-money laundering (AML) laws
• Managing the crypto-currency payment to the TA
• Receiving, reviewing, and operating the threat actor's decryption tool
• If necessary, contacting the hacker for technical help with the decryption utility

• Isolating affected endpoints and data stores to arrest the spread of the assault
• Creating replicas of every infected device and data store to allow forensics in parallel with restoration
• Adding anti-virus protection to all virus-free endpoints
• Restoring files from offline backups or unscathed endpoints
• Creating a clean recovery environment
• Remapping and reconnecting drives to match exactly their pre-attack state

Settling Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") files. TAs are then able to require an extra payment in exchange for not divulging this information or selling it. Unfortunately, there exists no way to guarantee that exfiltrated data have been totally erased by the threat actor. In fact, in numerous cases the threat actor has little say over where the information ends up. Settling an exfiltration ransom does not free you from the necessity of getting the guidance of legal counsel, conducting an investigation into which files were taken, and sending the necessary alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided online and on-premises IT services across the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts (SMEs) includes professionals who have earned advanced certifications in foundation technology platforms such as Cisco networking, VMware, and popular distributions of Linux. Progent's data security consultants have earned internationally recognized certifications such as CISA, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial management and ERP applications. This broad array of skills allows Progent to salvage and integrate the undamaged pieces of your network after a ransomware attack and rebuild them quickly into a functioning system. Progent has worked with leading insurance carriers including Chubb to assist businesses recover from ransomware attacks.

Contact Progent about Ransomware Settlement Negotiation Guidance in Beverly Hills
To get in touch with Progent about ransomware settlement negotiation guidance in Beverly Hills, call Progent at 800-462-8800 or go to Contact Progent.