Ransomware Response Consulting Experts
Crypto-Ransomware Settlement Consulting
Progent's Ransomware Settlement Negotiation Services in Mexico City
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated exercise that calls for a mix of field experience, IT knowledge and business savvy. It also calls for close co-operation with the ransomware victim's IT staff and the insurance provider, if there is one. Since the top priority of the ransomware victim is fast recovery, it is vital to deploy response teams that work efficiently, concurrently, and with intimate collaboration. Progent offers the breadth of IT skills and the deep bench of personnel to complement your IT staff and restore your network environment quickly and affordably.
Support available from Progent's ransomware settlement experts include:
- Determining the type of ransomware used in the attack
- Identifying and communicating with the hacker
- Evaluating the likelihood of recovery
- Validating the threat actor's decryption tool
- Budgeting a settlement payment with the victim and the insurance provider
- Negotiating a settlement amount and schedule with the threat actor
- Verifying compliance with anti-money laundering sanctions
- Managing the crypto-currency transfer to the TA
- Receiving, learning, and operating the TA's decryption mechanism
- If necessary, contacting the hacker for technical assistance with the decryption tool
- Quarantining infected endpoints to arrest the spread of the assault
- Making replicas of every breached device and data store in order to perform forensics in parallel with recovery
- Adding anti-virus protection to all virus-free endpoints
- Recovering files from offline restores or uncompromised endpoints
- Building a clean recovery environment
- Remapping and connecting drives to match precisely their pre-encryption condition
Paying Exfiltration Ransoms
Beyond demanding money for a decryption tool, current strains of ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly try to steal (or "exfiltrate") files. Hackers can then require an additional ransom for not posting this data on the dark web. Sadly, there exists no method to be certain that exfiltrated files have been completely deleted by the TA. Actually, in many instances the hacker has limited say about where the information ends up. Settling an exfiltration ransom does not eliminate the need for getting the advice of legal counsel, conducting an investigation into which data were stolen, and sending the mandated notifications to affected entities. In general, paying an exfiltration ransom is a waste.
Progent's Background
Progent has provided online and onsite network services across the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts (SMEs) includes professionals who have earned high-level certifications in foundation technologies such as Cisco networking, VMware, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial and ERP applications. This breadth of skills allows Progent to identify and integrate the surviving pieces of your network following a ransomware intrusion and rebuild them rapidly into an operational network. Progent has worked with leading cyber insurance providers like Chubb to assist businesses recover from ransomware attacks.
Contact Progent about Ransomware Settlement Expertise in Mexico City
To get in touch with Progent about crypto-ransomware settlement guidance in Mexico City, call Progent at
Select Topic: