Ransomware Response Services
Crypto-Ransomware Negotiation Consultants
Overview of Progent's Ransomware Negotiation Services in Albany
Progent has experience negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complicated activity that requires a mix of field experience, technical knowledge and business acumen. It also calls for close co-operation with the victim's IT team and the insurance carrier, if there is one. Since the number one goal of the ransomware victim is operational continuity, it is vital to deploy recovery groups that work effectively, in parallel, and in close communication. Progent has the breadth of IT skills and the deep bench of personnel to supplement your IT staff and restore your network rapidly and economically.
Support provided by Progent's ransomware settlement negotiation experts include:
- Establishing the type of ransomware involved in the attack
- Identifying and contacting the hacker persona
- Evaluating the likelihood of recovery
- Verifying the TA's decryption tool
- Determining a settlement with the ransomware victim and the insurance provider
- Establishing a settlement and schedule with the TA
- Checking accordance with anti-money laundering regulations
- Overseeing the crypto-currency payment to the hacker
- Receiving, reviewing, and using the TA's decryptor utility
- If necessary, contacting the TA for assistance with the decryptor tool
- Isolating infected endpoints to prevent further spread of the assault
- Creating replicas of each infected device and data store to allow forensics in parallel with cleanup
- Adding A/V protection to all virus-free endpoints
- Recovering data from offline backups or unscathed machines
- Building a pristine environment
- Remapping and reconnecting drives to reflect precisely their pre-attack condition
Paying Exfiltration Ransoms
In addition to demanding money for a decryption tool, modern strains of ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly try to exfiltrate information. TAs are then able to require an additional ransom in exchange for not publishing this information on the dark web. Unfortunately, there is no way to prove that stolen data have been totally deleted by the hacker. In fact, in many cases the TA has limited control over who can access the stolen files. Settling an exfiltration ransom does not free you from the need for engaging the advice of privacy attorneys, conducting an investigation into which data were taken, and carrying out the necessary alerts to affected entities. Generally, paying an exfiltration ransom is a waste.
Progent's Background
Progent has delivered remote and on-premises network services throughout the United States for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technology platforms such as Cisco networking, VMware, and major distributions of Linux. Progent's data security experts have earned prestigious certifications including CISA, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial and ERP applications. This scope of skills allows Progent to identify and integrate the surviving parts of your network following a ransomware attack and reconstruct them rapidly into an operational system. Progent has worked with leading insurance carriers like Chubb to assist businesses recover from ransomware assaults.
Contact Progent about Ransomware Settlement Negotiation Services in Albany
To get in touch with Progent about ransomware settlement negotiation expertise in Albany, phone Progent at
Select Topic: