Ransomware Solutions Consultants
Ransomware Settlement Support
Overview of Progent's Ransomware Settlement Negotiation Services in Arlington
Progent has experience negotiating ransomware settlements with threat actors. Reaching an optimum settlement is a complicated activity that calls for a mix of real-word experience, IT skills and business savvy. It also demands working closely with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the number one priority of the ransomware victim is fast recovery, it is vital to establish recovery groups that operate effectively, in parallel, and in close communication. Progent has the breadth of technical knowledge and the depth of experts to supplement your IT support team and restore your network rapidly and economically.
Support provided by Progent's ransomware settlement experts include:
- Establishing the type of ransomware used in the attack
- Identifying and communicating with the hacker
- Evaluating the likelihood of recovery
- Testing the threat actor's decryption tool
- Budgeting a settlement with the victim and the cyber insurance carrier
- Negotiating a settlement and timeline with the TA
- Confirming adherence to anti-money laundering laws
- Carrying out the crypto-currency transfer to the TA
- Receiving, learning, and operating the TA's decryptor mechanism
- If necessary, contacting the threat actor for technical assistance with the decryption utility
- Quarantining infected endpoints and data stores to prevent further spread of the attack
- Creating digital copies of each breached device and data store to allow forensics without interfering with cleanup
- Adding A/V agents to all clean endpoints
- Restoring data from offline restores or unscathed endpoints
- Creating a pristine recovery environment
- Remapping and connecting drives to reflect exactly their pre-encryption condition
Exfiltration Ransoms
Beyond extorting payment for a decryption utility, current strains of crypto-ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") files. Hackers can then require an additional ransom in exchange for not divulging this data or selling it. Sadly, there is no way to be certain that exfiltrated files have been completely erased by the hacker. Actually, in many cases the TA has little control about who can access the stolen files. Paying an exfiltration ransom does not free you from the need for engaging the guidance of privacy lawyers, conducting an inventory of data were compromised, and performing the necessary alerts to impacted entities. Generally, paying an exfiltration ransom is a waste.
Progent's Background
Progent has provided online and onsite network services across the United States for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have earned high-level certifications in core technologies including Cisco networking, VMware, and major Linux distros. Progent's data security experts have earned prestigious certifications including CISA, CISSP, GIAC, and CMMC 2.0. (Refer to Progent's certifications). Progent also has guidance in financial management and ERP applications. This breadth of skills gives Progent the ability to salvage and integrate the undamaged parts of your network after a ransomware attack and reconstruct them rapidly into an operational network. Progent has collaborated with top cyber insurance carriers including Chubb to assist organizations clean up after ransomware attacks.
Contact Progent about Ransomware Settlement Negotiation Expertise in Arlington
To get in touch with Progent about ransomware settlement negotiation guidance in Arlington, phone Progent at
Select Topic: