Ransomware Response Services
Ransomware Settlement Consultants
Overview of Progent's Ransomware Settlement Negotiation Consulting in Fargo
Progent has experience negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complex activity that requires a combination of real-word experience, technical skills and business acumen. It also demands working closely with the ransomware victim's IT team and the insurance provider, if any. Since the number one priority of the ransomware target is operational continuity, it is vital to establish recovery groups that work effectively, concurrently, and with intimate collaboration. Progent offers the breadth of technical skills and the depth of personnel to complement your network staff and recover your network environment quickly and economically.
Services available from Progent's ransomware negotiation experts include:
- Determining the kind of ransomware used in the attack
- Making contact with the hacker persona
- Assessing the likelihood of recovery
- Testing the threat actor's decryption capabilities
- Budgeting a settlement range with the victim and the cyber insurance carrier
- Establishing a settlement amount and timeline with the TA
- Checking accordance with anti-money laundering (AML) sanctions
- Managing the crypto-currency disbursement to the hacker
- Acquiring, learning, and operating the threat actor's decryption utility
- If needed, contacting the TA for technical assistance with the decryptor tool
- Quarantining affected endpoints and data stores to prevent further progress of the assault
- Making digital copies of each infected server and endpoint and data store in order to perform forensics without interfering with cleanup
- Installing anti-virus protection to all clean endpoints
- Salvaging files from offline restores or unscathed machines
- Building a clean environment
- Remapping and reconnecting drives to match exactly their pre-encryption state
Paying Exfiltration Ransoms
In addition to extorting payment for a decryption tool, current variants of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly attempt to exfiltrate information. Hackers can then require an extra payment in exchange for not divulging this data on the dark web. Unfortunately, there exists no way to be certain that exfiltrated data have been completely erased by the threat actor. In fact, in many cases the threat actor has little control about where the information ends up. Settling an exfiltration ransom does not free you from the necessity of seeking the advice of legal counsel, conducting an audit on which files were taken, and carrying out the necessary notifications to affected entities. In general, paying an exfiltration ransom is not recommended.
Progent's Background
Progent has delivered remote and onsite IT services throughout the United States for more than two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned high-level certifications in core technology platforms including Cisco infrastructure, VMware, and major Linux distros. Progent's data security consultants have earned prestigious certifications including CISM, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and ERP application software. This broad array of skills gives Progent the ability to identify and consolidate the undamaged pieces of your IT environment following a ransomware attack and rebuild them quickly into a viable network. Progent has collaborated with top cyber insurance carriers including Chubb to help organizations clean up after ransomware attacks.
Contact Progent about Ransomware Settlement Services in Fargo
To contact with Progent about crypto-ransomware settlement expertise in Fargo, call Progent at
Select Topic: