Ransomware Response Consultants

Progent's Ransomware Settlement Negotiation Consulting in Perth
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that requires a combination of real-word experience, IT knowledge and business savvy. It also calls for close co-operation with the victim's IT staff and the cyber insurance provider, if any. Because the top priority of the ransomware victim is fast recovery, it is critical to deploy response groups that operate efficiently, in parallel, and in close communication. Progent offers the scope of technical skills and the depth of personnel to supplement your IT support team and recover your network quickly and affordably.

Support available from Progent's ransomware negotiation team include:

• Determining the type of ransomware involved in the attack
• Identifying and communicating with the hacker
• Evaluating the likelihood of recovery
• Validating the hacker's decryption tool
• Determining a settlement range with the ransomware victim and the insurance carrier
• Negotiating a settlement amount and schedule with the TA
• Checking compliance with anti-money laundering (AML) regulations
• Carrying out the crypto-currency disbursement to the hacker
• Receiving, learning, and using the hacker's decryptor utility
• If necessary, contacting the hacker for technical help with the decryption tool

• Quarantining infected endpoints and data stores to arrest the spread of the assault
• Making replicas of each breached device and data store to allow forensics in parallel with restoration
• Installing anti-virus agents to all clean endpoints
• Restoring data from air-gapped backups or uncompromised endpoints
• Creating a clean environment
• Remapping and connecting drives to reflect exactly their pre-attack state

Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim often try to steal (or "exfiltrate") files. Hackers are then able to require an extra payment in exchange for not publishing this data on the dark web. Sadly, there exists no way to prove that exfiltrated data have been totally erased by the hacker. In fact, in numerous cases the TA has little say about who can access the stolen files. Settling an exfiltration ransom does not eliminate the necessity of getting the guidance of privacy lawyers, performing an audit on which files were compromised, and performing the necessary alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.

Progent's Background
Progent has delivered remote and onsite network services across the U.S. for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have been awarded advanced certifications in core technology platforms including Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has guidance in financial and ERP software. This breadth of skills allows Progent to salvage and consolidate the undamaged pieces of your IT environment after a ransomware attack and reconstruct them rapidly into a functioning system. Progent has collaborated with leading insurance providers like Chubb to assist businesses recover from ransomware assaults.

Contact Progent about Ransomware Settlement Services in Perth
To get in touch with Progent about ransomware settlement guidance in Perth, call Progent at 800-462-8800 or go to Contact Progent.