Ransomware Response Consulting Services
Ransomware Settlement Guidance
Progent's Ransomware Negotiation Services in Buffalo
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated activity that requires a combination of real-word experience, IT knowledge and business acumen. It also demands working closely with the ransomware victim's IT team and the insurance carrier, if any. Since the top goal of the ransomware target is fast recovery, it is vital to establish response groups that work effectively, in parallel, and with intimate collaboration. Progent offers the breadth of IT skills and the depth of experts to supplement your network staff and recover your network environment quickly and economically.
Support available from Progent's ransomware settlement team include:
- Determining the type of ransomware involved in the assault
- Identifying and contacting the hacker
- Assessing the likelihood of recovery
- Verifying the hacker's decryption tool
- Determining a settlement amount with the ransomware victim and the cyber insurance provider
- Establishing a settlement amount and schedule with the TA
- Confirming accordance with anti-money laundering sanctions
- Carrying out the crypto-currency disbursement to the hacker
- Acquiring, reviewing, and operating the hacker's decryption utility
- If necessary, contacting the threat actor for technical help with the decryption utility
- Isolating affected endpoints to prevent further progress of the assault
- Creating replicas of each compromised device and data store in order to perform forensics without interfering with cleanup
- Installing A/V agents to all virus-free endpoints
- Salvaging data from air-gapped backups or unscathed machines
- Creating a pristine recovery environment
- Remapping and connecting drives to match precisely their pre-attack state
Paying Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly attempt to steal (or "exfiltrate") files. TAs are then able to require a separate settlement for not posting this information on the dark web. Unfortunately, there exists no method to prove that stolen files have been completely erased by the hacker. In fact, in numerous cases the hacker has little control over where the information ends up. Settling an exfiltration ransom does not free you from the need for engaging the guidance of legal counsel, conducting an inventory of files were compromised, and carrying out the mandated notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.
Progent's Qualifications
Progent has delivered online and on-premises IT services across the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts includes professionals who have earned advanced certifications in foundation technologies including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications such as CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP application software. This broad array of expertise allows Progent to identify and consolidate the undamaged pieces of your information system after a ransomware assault and rebuild them rapidly into an operational network. Progent has worked with leading cyber insurance carriers including Chubb to help businesses recover from ransomware assaults.
Contact Progent about Ransomware Settlement Negotiation Expertise in Buffalo
To contact with Progent about ransomware settlement negotiation services in Buffalo, call Progent at
Select Topic: