Ransomware Solutions Services
Crypto-Ransomware Settlement Consulting
Overview of Progent's Ransomware Negotiation Services in Lawrence
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an acceptable settlement is a complicated activity that requires a combination of field experience, IT knowledge and business savvy. It also demands working closely with the ransomware victim's IT staff and the insurance provider, if any. Because the top priority of the ransomware target is operational continuity, it is vital to establish response teams that work efficiently, concurrently, and with intimate collaboration. Progent has the scope of technical knowledge and the depth of personnel to supplement your IT staff and recover your network environment quickly and affordably.
Services available from Progent's ransomware settlement team include:
- Determining the kind of ransomware used in the assault
- Identifying and contacting the hacker persona
- Evaluating the likelihood of recovery
- Testing the hacker's decryption capabilities
- Deciding on an acceptable settlement range with the ransomware victim and the insurance carrier
- Negotiating a settlement and timeline with the hacker
- Confirming adherence to anti-money laundering sanctions
- Overseeing the crypto-currency transfer to the hacker
- Acquiring, reviewing, and using the threat actor's decryption utility
- If necessary, contacting the threat actor for assistance with the decryptor tool
- Quarantining affected endpoints to arrest the progress of the attack
- Making digital copies of every compromised device and data store to allow forensics in parallel with recovery
- Installing anti-virus protection to all virus-free endpoints
- Restoring data from air-gapped backups or unscathed endpoints
- Creating a pristine environment
- Mapping and reconnecting drives to match precisely their pre-attack state
Exfiltration Ransoms
In addition to demanding money for a decryption tool, current variants of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Nephilim commonly attempt to exfiltrate files. Hackers are then able to require an extra ransom in exchange for not divulging this information or selling it. Sadly, there is no method to prove that exfiltrated data have been completely deleted by the TA. In fact, in numerous instances the TA has limited say about where the information ends up. Settling an exfiltration ransom does not free you from the need for seeking the advice of privacy attorneys, conducting an investigation into which files were compromised, and performing the required alerts to impacted entities. In general, paying an exfiltration ransom is a waste.
Progent's Background
Progent has delivered remote and onsite IT services across the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have earned advanced certifications in foundation technologies including Cisco networking, VMware virtualization, and popular Linux distros. Progent's data security experts have earned internationally recognized certifications such as CISM, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This broad array of expertise allows Progent to salvage and integrate the surviving pieces of your network following a ransomware intrusion and reconstruct them quickly into an operational network. Progent has collaborated with leading insurance providers including Chubb to help organizations clean up after ransomware assaults.
Contact Progent about Ransomware Settlement Negotiation Guidance in Lawrence
To get in touch with Progent about ransomware settlement negotiation guidance in Lawrence, phone Progent at
Select Topic: