Ransomware Response Consultants
Crypto-Ransomware Negotiation Expertise
Overview of Progent's Ransomware Negotiation Services in Jundiaí
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex activity that requires a combination of real-word experience, technical skills and business acumen. It also requires close co-operation with the ransomware victim's IT team and the insurance carrier, if any. Because the number one priority of the ransomware target is fast recovery, it is critical to deploy recovery teams that work efficiently, in parallel, and in close communication. Progent has the breadth of technical knowledge and the depth of personnel to complement your network staff and restore your network quickly and affordably.
Support provided by Progent's ransomware negotiation experts include:
- Determining the type of ransomware used in the attack
- Identifying and contacting the hacker persona
- Assessing the recovery risk
- Validating the TA's decryption tool
- Agreeing on a settlement payment with the ransomware victim and the cyber insurance carrier
- Establishing a settlement and timeline with the hacker
- Confirming accordance with anti-money laundering (AML) laws
- Managing the crypto-currency payment to the TA
- Acquiring, learning, and using the TA's decryptor utility
- If necessary, contacting the hacker for assistance with the decryptor utility
- Quarantining infected endpoints to prevent further spread of the assault
- Creating replicas of every infected device and data store in order to perform forensics without interfering with restoration
- Adding anti-virus protection to all virus-free endpoints
- Restoring files from air-gapped restores or uncompromised endpoints
- Creating a pristine environment
- Remapping and connecting drives to reflect exactly their pre-encryption state
Exfiltration Ransoms
Beyond extorting payment for a decryption tool, current strains of crypto-ransomware like Ryuk, Maze, DopplePaymer, and Egregor often try to steal (or "exfiltrate") files. Hackers are then able to require a separate settlement in exchange for not publishing this information or selling it. Unfortunately, there is no method to prove that exfiltrated data have been completely erased by the threat actor. Actually, in numerous instances the TA has limited say over data custody. Settling an exfiltration ransom does not free you from the necessity of seeking the guidance of legal counsel, performing an inventory of data were stolen, and sending the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.
Progent's Background
Progent has delivered online and onsite network services throughout the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have earned advanced certifications in core technologies including Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity consultants have earned prestigious certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See Progent's certifications). Progent also offers guidance in financial management and Enterprise Resource Planning applications. This breadth of expertise allows Progent to identify and integrate the undamaged parts of your IT environment after a ransomware intrusion and rebuild them rapidly into an operational system. Progent has worked with top cyber insurance carriers including Chubb to help businesses clean up after ransomware attacks.
Contact Progent about Ransomware Settlement Guidance in Jundiaí
To get in touch with Progent about crypto-ransomware settlement services in Jundiaí, phone Progent at
Select Topic: