Ransomware Response Services
Ransomware Settlement Guidance
Overview of Progent's Ransomware Settlement Negotiation Consulting in Des Moines
Progent is experienced in negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated exercise that calls for a combination of real-word experience, technical skills and business savvy. It also requires working closely with the victim's IT staff and the insurance provider, if any. Since the number one priority of the ransomware target is fast recovery, it is vital to establish recovery groups that work efficiently, concurrently, and in close communication. Progent has the scope of technical knowledge and the depth of experts to supplement your network staff and recover your network quickly and affordably.
Services offered by Progent's ransomware settlement negotiation team include:
- Establishing the kind of ransomware involved in the assault
- Identifying and communicating with the hacker
- Evaluating the likelihood of recovery
- Verifying the TA's decryption capabilities
- Deciding on an acceptable settlement payment with the ransomware victim and the cyber insurance carrier
- Negotiating a settlement amount and timeline with the hacker
- Confirming accordance with anti-money laundering sanctions
- Carrying out the crypto-currency disbursement to the hacker
- Acquiring, reviewing, and using the threat actor's decryptor utility
- If necessary, contacting the hacker for technical assistance with the decryptor utility
- Quarantining affected endpoints and data stores to prevent further spread of the assault
- Making replicas of every breached device and data store in order to perform forensics in parallel with cleanup
- Adding A/V protection to all virus-free endpoints
- Salvaging data from air-gapped backups or uncompromised endpoints
- Building a clean recovery environment
- Mapping and reconnecting drives to match exactly their pre-encryption condition
Paying Exfiltration Ransoms
In addition to extorting money for a decryption tool, current variants of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim often attempt to exfiltrate files. Hackers are then able to demand an extra payment in exchange for not publishing this data or selling it. Sadly, there is no method to guarantee that exfiltrated files have been totally deleted by the TA. Actually, in many cases the hacker has little control about data custody. Paying an exfiltration ransom does not eliminate the need for engaging the guidance of legal counsel, performing an inventory of files were taken, and performing the required notifications to affected entities. Generally, paying an exfiltration ransom is a waste.
Progent's Background
Progent has provided online and on-premises IT services throughout the United States for over 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have earned advanced certifications in core technologies including Cisco networking, VMware virtualization, and major Linux distros. Progent's data security experts have earned prestigious certifications such as CISM, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial and ERP application software. This broad array of skills gives Progent the ability to salvage and integrate the undamaged parts of your network following a ransomware assault and rebuild them rapidly into a viable network. Progent has worked with top cyber insurance providers including Chubb to assist businesses clean up after ransomware assaults.
Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Des Moines
To get in touch with Progent about crypto-ransomware settlement services in Des Moines, phone Progent at
Select Topic: