Ransomware Response Consulting Experts

Progent's Ransomware Settlement Negotiation Services in Sherman Oaks
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that calls for a combination of field experience, IT skills and business acumen. It also requires working closely with the cyber-extortion target's IT team and the cyber insurance carrier, if there is one. Because the top goal of the ransomware target is fast recovery, it is vital to deploy recovery teams that operate effectively, concurrently, and with intimate collaboration. Progent has the scope of technical knowledge and the depth of personnel to complement your IT support team and restore your network quickly and affordably.

Support available from Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the assault
• Making contact with the hacker persona
• Evaluating the likelihood of recovery
• Testing the TA's decryption tool
• Agreeing on a settlement with the ransomware victim and the insurance carrier
• Negotiating a settlement amount and schedule with the threat actor
• Confirming compliance with anti-money laundering (AML) sanctions
• Carrying out the crypto-currency disbursement to the hacker
• Acquiring, reviewing, and operating the hacker's decryption utility
• If needed, contacting the threat actor for technical assistance with the decryption tool

• Isolating infected endpoints and data stores to prevent further spread of the attack
• Creating replicas of every breached server and endpoint and data store to allow forensics in parallel with recovery
• Installing anti-virus protection to all clean endpoints
• Salvaging data from offline backups or uncompromised endpoints
• Creating a pristine environment
• Mapping and connecting drives to match exactly their pre-encryption state

Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current variants of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to exfiltrate information. Hackers are then able to require an extra settlement for not posting this information on the dark web. Unfortunately, there exists no way to guarantee that exfiltrated files have been completely deleted by the threat actor. In fact, in numerous instances the TA has limited control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the need for seeking the advice of privacy attorneys, conducting an inventory of files were compromised, and carrying out the mandated notifications to affected entities. In general, paying an exfiltration ransom is a waste.

Progent's Qualifications
Progent has delivered online and on-premises IT services throughout the U.S. for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned high-level certifications in core technologies including Cisco networking, VMware, and major Linux distros. Progent's cybersecurity experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial and Enterprise Resource Planning software. This broad array of expertise allows Progent to identify and integrate the surviving pieces of your information system following a ransomware intrusion and reconstruct them rapidly into an operational system. Progent has worked with top insurance providers including Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Sherman Oaks
To get in touch with Progent about crypto-ransomware settlement negotiation guidance in Sherman Oaks, call Progent at 800-462-8800 or go to Contact Progent.