Ransomware Response Consulting Services
Ransomware Settlement Consultants
Progent's Ransomware Settlement Negotiation Consulting in Minnetonka
Progent is experienced in negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex activity that calls for a mix of field experience, technical skills and business acumen. It also demands working closely with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Since the number one priority of the ransomware victim is operational continuity, it is critical to establish response groups that operate effectively, in parallel, and with intimate collaboration. Progent offers the breadth of technical skills and the depth of experts to supplement your network staff and restore your network environment quickly and economically.
Services available from Progent's ransomware settlement experts include:
- Determining the type of ransomware used in the assault
- Identifying and communicating with the hacker persona
- Evaluating the likelihood of recovery
- Testing the threat actor's decryption tool
- Determining a settlement with the victim and the insurance provider
- Establishing a settlement and schedule with the TA
- Checking compliance with anti-money laundering (AML) regulations
- Carrying out the crypto-currency payment to the TA
- Receiving, reviewing, and using the TA's decryption tool
- If necessary, contacting the threat actor for assistance with the decryption utility
- Quarantining infected endpoints and data stores to prevent further progress of the assault
- Making replicas of every compromised server and endpoint and data store to allow forensics in parallel with restoration
- Installing A/V agents to all clean endpoints
- Restoring data from air-gapped backups or unscathed machines
- Building a clean recovery environment
- Remapping and reconnecting datastores to match precisely their pre-attack condition
Exfiltration Ransoms
In addition to demanding money for a decryption utility, current variants of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to steal (or "exfiltrate") information. TAs can then demand a separate payment in exchange for not posting this information on the dark web. Sadly, there exists no way to be certain that exfiltrated data have been completely deleted by the TA. In fact, in many instances the hacker has limited control about who can access the stolen files. Paying an exfiltration ransom does not free you from the necessity of engaging the guidance of privacy lawyers, performing an inventory of files were stolen, and carrying out the mandated notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.
Progent's Background
Progent has provided remote and on-premises network services across the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts includes consultants who have been awarded high-level certifications in foundation technologies including Cisco networking, VMware, and major distributions of Linux. Progent's data security experts have earned prestigious certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning software. This broad array of expertise gives Progent the ability to salvage and integrate the surviving parts of your network after a ransomware attack and rebuild them quickly into a functioning system. Progent has collaborated with top insurance carriers including Chubb to assist organizations clean up after ransomware attacks.
Contact Progent about Ransomware Settlement Expertise in Minnetonka
To get in touch with Progent about ransomware settlement services in Minnetonka, phone Progent at
Select Topic: