Ransomware Solutions Consulting Services
Crypto-Ransomware Negotiation Consultants
Progent's Ransomware Settlement Negotiation Consulting in Fremont
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that calls for a combination of real-word experience, technical knowledge and business acumen. It also requires close co-operation with the cyber-extortion target's IT team and the cyber insurance provider, if there is one. Because the top priority of the ransomware target is fast recovery, it is vital to deploy recovery teams that work efficiently, concurrently, and in close communication. Progent has the scope of technical skills and the deep bench of experts to complement your network staff and recover your network quickly and economically.
Support offered by Progent's ransomware negotiation team include:
- Determining the kind of ransomware involved in the attack
- Identifying and contacting the hacker persona
- Assessing the likelihood of recovery
- Validating the TA's decryption capabilities
- Deciding on an acceptable settlement with the victim and the insurance provider
- Establishing a settlement amount and timeline with the hacker
- Verifying compliance with anti-money laundering (AML) sanctions
- Overseeing the crypto-currency disbursement to the TA
- Receiving, reviewing, and using the hacker's decryptor tool
- If necessary, contacting the TA for assistance with the decryptor tool
- Isolating affected endpoints to arrest the spread of the attack
- Creating replicas of every compromised server and endpoint and data store in order to perform forensics in parallel with restoration
- Adding A/V protection to all virus-free endpoints
- Restoring data from air-gapped restores or unscathed machines
- Building a clean recovery environment
- Mapping and reconnecting datastores to reflect exactly their pre-encryption state
Exfiltration Ransoms
Beyond extorting money for a decryption tool, current strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Egregor often try to steal (or "exfiltrate") information. TAs are then able to demand an extra settlement in exchange for not posting this information or selling it. Unfortunately, there is no way to guarantee that exfiltrated files have been totally deleted by the TA. In fact, in numerous cases the TA has limited say about data custody. Paying an exfiltration ransom does not free you from the necessity of seeking the guidance of legal counsel, conducting an inventory of files were taken, and carrying out the necessary notifications to impacted entities. In general, paying an exfiltration ransom is a waste.
Progent's Background
Progent has delivered online and onsite network services throughout the United States for more than two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have earned high-level certifications in core technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial management and ERP software. This broad array of expertise gives Progent the ability to identify and consolidate the undamaged parts of your information system after a ransomware assault and rebuild them quickly into an operational network. Progent has collaborated with leading cyber insurance carriers including Chubb to help businesses recover from ransomware assaults.
Contact Progent about Ransomware Settlement Expertise in Fremont
To get in touch with Progent about crypto-ransomware settlement services in Fremont, call Progent at
Select Topic: