Ransomware Solutions Consultants
Ransomware Settlement Services
Overview of Progent's Ransomware Negotiation Consulting in Pasadena
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated exercise that calls for a mix of real-word experience, technical knowledge and business acumen. It also calls for working closely with the victim's IT team and the cyber insurance carrier, if there is one. Because the number one priority of the ransomware victim is operational continuity, it is vital to deploy recovery groups that work efficiently, concurrently, and in close communication. Progent has the breadth of IT skills and the deep bench of experts to complement your IT staff and recover your network rapidly and economically.
Services provided by Progent's ransomware negotiation team include:
- Establishing the kind of ransomware used in the assault
- Identifying and contacting the hacker persona
- Evaluating the likelihood of recovery
- Verifying the threat actor's decryption capabilities
- Budgeting a settlement with the victim and the cyber insurance carrier
- Establishing a settlement and timeline with the hacker
- Checking compliance with anti-money laundering (AML) sanctions
- Overseeing the crypto-currency transfer to the hacker
- Acquiring, reviewing, and using the hacker's decryption tool
- If needed, contacting the TA for technical assistance with the decryption utility
- Isolating affected endpoints to arrest the progress of the assault
- Creating digital copies of each infected server and endpoint and data store to allow forensics without interfering with recovery
- Installing anti-virus agents to all clean endpoints
- Salvaging data from air-gapped backups or uncompromised machines
- Building a pristine environment
- Mapping and reconnecting drives to reflect exactly their pre-encryption condition
Paying Exfiltration Ransoms
In addition to extorting money for a decryption utility, modern strains of ransomware such as Ryuk, Maze, Netwalker, and Nephilim commonly attempt to exfiltrate files. TAs are then able to require an extra payment for not posting this data or selling it. Sadly, there is no way to prove that stolen files have been totally deleted by the threat actor. In fact, in many instances the threat actor has little say over data custody. Paying an exfiltration ransom does not free you from the need for engaging the guidance of legal counsel, conducting an inventory of data were stolen, and performing the required notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.
Progent's Background
Progent has provided online and onsite IT services across the United States for over two decades and has been awarded Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes consultants who have been awarded advanced certifications in foundation technologies such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications such as CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also offers top-tier support in financial management and ERP application software. This broad array of skills allows Progent to identify and consolidate the undamaged pieces of your information system after a ransomware attack and reconstruct them quickly into a viable network. Progent has worked with top insurance carriers like Chubb to assist organizations recover from ransomware assaults.
Contact Progent about Ransomware Settlement Negotiation Services in Pasadena
To get in touch with Progent about ransomware settlement expertise in Pasadena, phone Progent at
Select Topic: