Ransomware Solutions Consulting Services
Ransomware Settlement Negotiation Support
Overview of Progent's Ransomware Negotiation Consulting in Birmingham
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complicated activity that calls for a combination of field experience, IT skills and business savvy. It also calls for working closely with the victim's IT team and the insurance provider, if any. Because the number one goal of the ransomware target is operational continuity, it is vital to deploy response groups that operate effectively, in parallel, and in close communication. Progent offers the breadth of technical knowledge and the deep bench of personnel to complement your IT support team and restore your network rapidly and affordably.
Support available from Progent's ransomware settlement team include:
- Establishing the kind of ransomware involved in the attack
- Making contact with the hacker persona
- Evaluating the recovery risk
- Testing the hacker's decryption capabilities
- Deciding on an acceptable settlement payment with the victim and the insurance provider
- Establishing a settlement amount and timeline with the hacker
- Confirming accordance with anti-money laundering (AML) regulations
- Carrying out the crypto-currency transfer to the hacker
- Acquiring, learning, and using the TA's decryption utility
- If needed, contacting the threat actor for technical help with the decryptor tool
- Isolating infected endpoints to prevent further progress of the attack
- Creating digital copies of each compromised device and data store to allow forensics in parallel with restoration
- Installing A/V agents to all clean endpoints
- Recovering files from air-gapped restores or unscathed machines
- Building a pristine environment
- Mapping and reconnecting datastores to reflect exactly their pre-encryption condition
Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Nephilim often attempt to exfiltrate information. TAs can then require an extra payment for not posting this data or selling it. Sadly, there is no way to guarantee that stolen files have been completely erased by the hacker. In fact, in numerous cases the threat actor has limited control about where the information ends up. Settling an exfiltration ransom does not free you from the necessity of engaging the advice of privacy attorneys, performing an inventory of data were compromised, and performing the necessary alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.
Progent's Background
Progent has provided online and on-premises network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned advanced certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned prestigious certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning software. This broad array of skills allows Progent to identify and consolidate the undamaged parts of your network following a ransomware attack and rebuild them rapidly into a functioning network. Progent has worked with top cyber insurance providers including Chubb to assist businesses recover from ransomware attacks.
Contact Progent about Ransomware Settlement Expertise in Birmingham
To contact with Progent about crypto-ransomware settlement negotiation guidance in Birmingham, call Progent at
Select Topic: