Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Services in Sherman Oaks
Progent has experience negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complex activity that requires a combination of field experience, technical knowledge and business acumen. It also demands working closely with the ransomware victim's IT staff and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware victim is operational continuity, it is vital to deploy recovery teams that operate efficiently, in parallel, and in close communication. Progent offers the breadth of technical skills and the deep bench of experts to complement your network staff and recover your network environment quickly and economically.

Services provided by Progent's ransomware settlement negotiation team include:

• Determining the type of ransomware involved in the attack
• Identifying and contacting the hacker persona
• Evaluating the likelihood of recovery
• Testing the hacker's decryption capabilities
• Agreeing on a settlement payment with the ransomware victim and the cyber insurance carrier
• Establishing a settlement amount and schedule with the threat actor
• Checking accordance with anti-money laundering (AML) laws
• Overseeing the crypto-currency payment to the hacker
• Receiving, reviewing, and operating the threat actor's decryptor mechanism
• If necessary, contacting the hacker for technical assistance with the decryption utility

• Isolating affected endpoints to prevent further spread of the attack
• Creating digital copies of every infected device and data store to allow forensics in parallel with cleanup
• Adding A/V agents to all virus-free endpoints
• Recovering files from air-gapped backups or uncompromised machines
• Building a pristine recovery environment
• Remapping and connecting drives to reflect precisely their pre-encryption state

Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern variants of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate files. Hackers can then require a separate settlement for not publishing this data or selling it. Sadly, there exists no way to guarantee that exfiltrated data have been totally erased by the TA. Actually, in numerous instances the hacker has little say over data custody. Settling an exfiltration ransom does not free you from the need for getting the guidance of privacy attorneys, conducting an audit on which data were compromised, and sending the mandated alerts to impacted entities. In general, paying an exfiltration ransom is not recommended.

Progent's Qualifications
Progent has provided remote and on-premises network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have been awarded advanced certifications in foundation technology platforms such as Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications including CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial and Enterprise Resource Planning software. This breadth of expertise gives Progent the ability to salvage and consolidate the undamaged pieces of your information system following a ransomware attack and rebuild them quickly into a functioning network. Progent has worked with leading insurance providers including Chubb to help organizations clean up after ransomware attacks.

Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Sherman Oaks
To get in touch with Progent about ransomware settlement expertise in Sherman Oaks, phone Progent at 800-462-8800 or go to Contact Progent.