Ransomware Response Services
Ransomware Settlement Negotiation Consultants
Progent's Ransomware Settlement Negotiation Services in Birmingham
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an optimum settlement is a complicated exercise that calls for a combination of real-word experience, technical skills and business acumen. It also calls for working closely with the victim's IT team and the insurance carrier, if any. Because the top goal of the ransomware target is operational continuity, it is critical to establish response groups that work efficiently, concurrently, and in close communication. Progent offers the breadth of IT skills and the depth of personnel to complement your IT staff and recover your network rapidly and affordably.
Services offered by Progent's ransomware negotiation team include:
- Establishing the type of ransomware involved in the attack
- Making contact with the hacker persona
- Evaluating the likelihood of recovery
- Verifying the TA's decryption capabilities
- Deciding on an acceptable settlement payment with the ransomware victim and the insurance provider
- Establishing a settlement amount and schedule with the hacker
- Confirming adherence to anti-money laundering regulations
- Managing the crypto-currency payment to the hacker
- Acquiring, learning, and operating the hacker's decryption tool
- If necessary, contacting the threat actor for technical assistance with the decryptor utility
- Quarantining infected endpoints and data stores to prevent further spread of the attack
- Creating digital copies of each infected device and data store in order to perform forensics in parallel with cleanup
- Adding anti-virus agents to all virus-free endpoints
- Recovering files from air-gapped restores or uncompromised machines
- Building a pristine environment
- Remapping and reconnecting drives to match exactly their pre-encryption state
Settling Exfiltration Ransoms
In addition to demanding money for a decryption tool, current strains of crypto-ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim often attempt to exfiltrate information. TAs can then require an extra ransom for not divulging this information on the dark web. Sadly, there exists no way to guarantee that exfiltrated data have been completely deleted by the threat actor. In fact, in numerous cases the hacker has limited control over who can access the stolen files. Paying an exfiltration ransom does not eliminate the necessity of getting the advice of privacy lawyers, performing an inventory of files were compromised, and performing the required notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.
Progent's Qualifications
Progent has provided remote and on-premises IT services across the U.S. for more than 20 years and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of subject matter experts includes consultants who have earned high-level certifications in core technologies such as Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security consultants have earned industry-recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial and Enterprise Resource Planning application software. This breadth of expertise gives Progent the ability to identify and integrate the surviving pieces of your network following a ransomware intrusion and reconstruct them rapidly into a functioning network. Progent has collaborated with top insurance providers like Chubb to help organizations recover from ransomware attacks.
Contact Progent about Ransomware Settlement Services in Birmingham
To contact with Progent about crypto-ransomware settlement expertise in Birmingham, call Progent at
Select Topic: