Ransomware Response Consulting Services
Ransomware Negotiation Services
Overview of Progent's Ransomware Negotiation Services in Knoxville
Progent has experience negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated activity that calls for a combination of field experience, IT skills and business acumen. It also requires working closely with the victim's IT staff and the insurance carrier, if there is one. Since the top goal of the ransomware target is operational continuity, it is vital to deploy recovery groups that work efficiently, in parallel, and with intimate collaboration. Progent offers the scope of IT knowledge and the depth of personnel to supplement your IT staff and recover your network quickly and affordably.
Services provided by Progent's ransomware settlement negotiation experts include:
- Establishing the type of ransomware used in the attack
- Making contact with the hacker
- Evaluating the recovery risk
- Testing the hacker's decryption capabilities
- Deciding on an acceptable settlement payment with the ransomware victim and the insurance provider
- Negotiating a settlement amount and timeline with the threat actor
- Confirming adherence to anti-money laundering (AML) regulations
- Overseeing the crypto-currency disbursement to the hacker
- Acquiring, learning, and operating the TA's decryptor utility
- If needed, contacting the threat actor for assistance with the decryptor tool
- Quarantining affected endpoints to arrest the spread of the attack
- Creating digital copies of each compromised server and endpoint and data store to allow forensics in parallel with restoration
- Adding anti-virus protection to all virus-free endpoints
- Recovering data from air-gapped backups or unscathed machines
- Building a pristine recovery environment
- Mapping and reconnecting drives to match exactly their pre-attack state
Paying Exfiltration Ransoms
Beyond demanding money for a decryption tool, modern variants of ransomware like Ryuk, Maze, Netwalker, and Egregor often try to steal (or "exfiltrate") information. Hackers are then able to require an additional ransom in exchange for not divulging this information or selling it. Sadly, there is no way to guarantee that exfiltrated files have been completely erased by the hacker. Actually, in many instances the hacker has little say over the disposition of the data. Paying an exfiltration ransom does not eliminate the necessity of seeking the guidance of privacy lawyers, conducting an audit on which data were taken, and performing the required alerts to impacted entities. In general, paying an exfiltration ransom is a waste.
Progent's Background
Progent has provided online and on-premises network services throughout the United States for over two decades and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of SMEs includes consultants who have earned advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and popular distributions of Linux. Progent's cybersecurity experts have earned internationally recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP applications. This scope of expertise gives Progent the ability to identify and integrate the surviving parts of your information system following a ransomware assault and rebuild them quickly into a viable network. Progent has worked with leading cyber insurance carriers including Chubb to assist organizations recover from ransomware attacks.
Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Knoxville
To get in touch with Progent about ransomware settlement guidance in Knoxville, phone Progent at
Select Topic: