Ransomware Response Services
Ransomware Settlement Expertise
Overview of Progent's Ransomware Negotiation Consulting in Perth
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that requires a mix of field experience, technical knowledge and business acumen. It also calls for close co-operation with the cyber-extortion target's IT staff and the cyber insurance provider, if there is one. Since the number one priority of the ransomware victim is operational continuity, it is critical to deploy response groups that operate effectively, in parallel, and in close communication. Progent has the breadth of technical skills and the deep bench of personnel to complement your network support team and restore your network rapidly and affordably.
Services provided by Progent's ransomware negotiation experts include:
- Determining the type of ransomware involved in the attack
- Identifying and contacting the hacker
- Evaluating the likelihood of recovery
- Testing the TA's decryption tool
- Determining a settlement amount with the victim and the insurance carrier
- Establishing a settlement and timeline with the TA
- Verifying compliance with anti-money laundering laws
- Carrying out the crypto-currency transfer to the hacker
- Receiving, learning, and operating the hacker's decryptor mechanism
- If necessary, contacting the hacker for technical assistance with the decryption utility
- Quarantining affected endpoints and data stores to prevent further spread of the attack
- Creating replicas of each breached server and endpoint and data store to allow forensics in parallel with cleanup
- Adding anti-virus protection to all virus-free endpoints
- Restoring files from air-gapped backups or uncompromised endpoints
- Creating a pristine environment
- Remapping and connecting drives to reflect exactly their pre-encryption state
Paying Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current strains of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often try to steal (or "exfiltrate") information. TAs can then demand an extra settlement for not publishing this information on the dark web. Unfortunately, there exists no way to prove that exfiltrated data have been totally erased by the hacker. In fact, in many instances the threat actor has little control about the disposition of the data. Paying an exfiltration ransom does not free you from the necessity of seeking the advice of privacy lawyers, performing an inventory of files were stolen, and performing the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is a waste.
Progent's Background
Progent has provided online and on-premises IT services across the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have been awarded high-level certifications in core technologies including Cisco infrastructure, VMware virtualization, and popular Linux distros. Progent's data security experts have earned industry-recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has top-tier support in financial and Enterprise Resource Planning application software. This breadth of skills allows Progent to identify and consolidate the undamaged parts of your IT environment after a ransomware assault and reconstruct them rapidly into a functioning system. Progent has collaborated with top insurance providers like Chubb to help organizations clean up after ransomware attacks.
Contact Progent about Ransomware Settlement Guidance in Perth
To get in touch with Progent about ransomware settlement negotiation expertise in Perth, phone Progent at
Select Topic: