Ransomware Response Consulting Services
Ransomware Settlement Consultants
Overview of Progent's Ransomware Negotiation Services in Greensboro
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an acceptable settlement is a complex activity that requires a combination of field experience, technical skills and business savvy. It also demands working closely with the victim's IT team and the cyber insurance carrier, if any. Because the top goal of the ransomware victim is fast recovery, it is critical to establish response teams that work efficiently, in parallel, and in close communication. Progent offers the scope of IT skills and the deep bench of experts to supplement your IT staff and restore your network rapidly and affordably.
Services available from Progent's ransomware settlement experts include:
- Determining the kind of ransomware used in the assault
- Making contact with the hacker persona
- Assessing the likelihood of recovery
- Verifying the threat actor's decryption tool
- Budgeting a settlement range with the victim and the cyber insurance provider
- Establishing a settlement amount and timeline with the threat actor
- Confirming accordance with anti-money laundering (AML) sanctions
- Overseeing the crypto-currency transfer to the hacker
- Acquiring, learning, and operating the hacker's decryptor tool
- If necessary, contacting the TA for technical help with the decryption utility
- Quarantining affected endpoints and data stores to prevent further progress of the attack
- Creating digital copies of every infected server and endpoint and data store to allow forensics without interfering with restoration
- Adding anti-virus agents to all virus-free endpoints
- Salvaging data from offline restores or unscathed endpoints
- Building a clean recovery environment
- Remapping and reconnecting drives to reflect precisely their pre-attack state
Exfiltration Ransoms
In addition to demanding payment for a decryption tool, modern strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate information. Hackers can then require an extra ransom in exchange for not publishing this information on the dark web. Unfortunately, there is no way to prove that stolen data have been completely erased by the TA. Actually, in many cases the hacker has limited control about data custody. Paying an exfiltration ransom does not eliminate the need for getting the advice of privacy attorneys, performing an inventory of data were taken, and performing the necessary notifications to affected entities. Generally, paying an exfiltration ransom is a waste.
Progent's Qualifications
Progent has delivered remote and onsite IT services across the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes consultants who have earned high-level certifications in foundation technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security experts have earned prestigious certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and ERP software. This breadth of expertise gives Progent the ability to identify and consolidate the surviving parts of your information system following a ransomware assault and rebuild them rapidly into a functioning network. Progent has worked with leading insurance carriers including Chubb to assist organizations clean up after ransomware attacks.
Contact Progent about Ransomware Settlement Negotiation Guidance in Greensboro
To get in touch with Progent about ransomware settlement negotiation guidance in Greensboro, call Progent at
Select Topic: