Ransomware Response Consulting Experts
Crypto-Ransomware Settlement Consulting
Progent's Ransomware Settlement Negotiation Services in Ontario
Progent is experienced in negotiating ransomware settlements with adversaries. Negotiating an acceptable settlement is a complicated activity that requires a combination of field experience, IT skills and business acumen. It also calls for working closely with the ransomware victim's IT team and the cyber insurance carrier, if any. Since the top goal of the ransomware target is fast recovery, it is vital to deploy recovery teams that work effectively, in parallel, and in close communication. Progent has the scope of IT skills and the deep bench of personnel to supplement your network support team and recover your network environment quickly and economically.
Support offered by Progent's ransomware settlement negotiation experts include:
- Establishing the kind of ransomware used in the assault
- Making contact with the hacker persona
- Evaluating the likelihood of recovery
- Testing the threat actor's decryption tool
- Determining a settlement amount with the victim and the insurance carrier
- Negotiating a settlement amount and timeline with the TA
- Verifying compliance with anti-money laundering (AML) regulations
- Overseeing the crypto-currency payment to the TA
- Acquiring, reviewing, and using the threat actor's decryption mechanism
- If needed, contacting the hacker for technical help with the decryption tool
- Quarantining affected endpoints and data stores to arrest the spread of the assault
- Creating digital copies of each infected server and endpoint and data store in order to perform forensics without interfering with cleanup
- Installing anti-virus agents to all virus-free endpoints
- Restoring files from air-gapped backups or uncompromised endpoints
- Building a pristine recovery environment
- Mapping and reconnecting drives to reflect exactly their pre-attack state
Exfiltration Ransoms
Beyond demanding money for a decryption tool, current variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor commonly try to exfiltrate information. Hackers are then able to demand an extra settlement for not posting this information on the dark web. Sadly, there is no method to be certain that exfiltrated data have been totally deleted by the threat actor. Actually, in many instances the hacker has little control over where the information ends up. Settling an exfiltration ransom does not free you from the need for getting the guidance of privacy lawyers, conducting an inventory of files were stolen, and performing the required notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.
Progent's Qualifications
Progent has delivered remote and on-premises network services throughout the U.S. for more than two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes professionals who have been awarded advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security experts have earned industry-recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning application software. This broad array of expertise gives Progent the ability to salvage and consolidate the surviving pieces of your information system following a ransomware attack and rebuild them quickly into an operational network. Progent has worked with leading insurance providers including Chubb to assist organizations clean up after ransomware assaults.
Contact Progent about Ransomware Settlement Services in Ontario
To get in touch with Progent about ransomware settlement services in Ontario, phone Progent at
Select Topic: