Ransomware Response Consultants
Ransomware Negotiation Help
Overview of Progent's Ransomware Negotiation Consulting in Cincinnati
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex exercise that requires a mix of field experience, technical skills and business acumen. It also requires working closely with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the number one priority of the ransomware victim is operational continuity, it is critical to establish recovery teams that work effectively, in parallel, and in close communication. Progent offers the scope of technical skills and the deep bench of experts to supplement your network staff and restore your network quickly and affordably.
Services provided by Progent's ransomware negotiation team include:
- Determining the type of ransomware involved in the assault
- Identifying and contacting the hacker
- Evaluating the recovery risk
- Testing the hacker's decryption capabilities
- Budgeting a settlement amount with the ransomware victim and the insurance carrier
- Establishing a settlement and schedule with the threat actor
- Checking adherence to anti-money laundering regulations
- Overseeing the crypto-currency disbursement to the hacker
- Receiving, reviewing, and using the threat actor's decryption mechanism
- If necessary, contacting the threat actor for technical help with the decryption tool
- Isolating affected endpoints and data stores to prevent further progress of the assault
- Creating replicas of each compromised server and endpoint and data store in order to perform forensics without interfering with recovery
- Installing A/V agents to all virus-free endpoints
- Restoring files from offline backups or unscathed endpoints
- Creating a clean environment
- Mapping and reconnecting drives to reflect exactly their pre-encryption state
Settling Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to exfiltrate files. Hackers can then demand an additional ransom for not publishing this information or selling it. Unfortunately, there exists no way to be certain that exfiltrated files have been completely erased by the threat actor. In fact, in many instances the TA has little control about data custody. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy attorneys, performing an investigation into which files were stolen, and performing the mandated alerts to impacted entities. In general, paying an exfiltration ransom is a waste.
Progent's Background
Progent has provided remote and on-premises network services across the United States for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technology platforms including Cisco networking, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications such as CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial management and Enterprise Resource Planning applications. This broad array of expertise allows Progent to identify and integrate the surviving pieces of your network after a ransomware assault and reconstruct them rapidly into a viable system. Progent has worked with leading insurance carriers like Chubb to assist organizations clean up after ransomware assaults.
Contact Progent about Crypto-Ransomware Settlement Expertise in Cincinnati
To get in touch with Progent about ransomware settlement services in Cincinnati, call Progent at
Select Topic: