Ransomware Solutions Consultants
Crypto-Ransomware Negotiation Guidance
Overview of Progent's Ransomware Settlement Negotiation Services in Porto Alegre
Progent is experienced in negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complex activity that calls for a combination of field experience, technical skills and business savvy. It also requires close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Since the number one priority of the ransomware victim is fast recovery, it is vital to establish response groups that work effectively, concurrently, and in close communication. Progent offers the breadth of technical skills and the depth of experts to supplement your IT support team and restore your network quickly and affordably.
Support available from Progent's ransomware negotiation experts include:
- Determining the kind of ransomware involved in the attack
- Making contact with the hacker persona
- Assessing the recovery risk
- Testing the TA's decryption tool
- Budgeting a settlement payment with the victim and the insurance provider
- Negotiating a settlement and timeline with the hacker
- Checking accordance with anti-money laundering sanctions
- Overseeing the crypto-currency transfer to the TA
- Acquiring, learning, and operating the TA's decryptor utility
- If needed, contacting the TA for technical assistance with the decryption tool
- Quarantining infected endpoints and data stores to arrest the progress of the attack
- Making digital copies of each compromised server and endpoint and data store in order to perform forensics without interfering with cleanup
- Adding anti-virus protection to all clean endpoints
- Recovering data from offline restores or unscathed machines
- Creating a pristine recovery environment
- Mapping and reconnecting drives to match exactly their pre-encryption condition
Settling Exfiltration Ransoms
Beyond demanding money for a decryption utility, current strains of ransomware like Ryuk, Sodinokibi, DopplePaymer, and Egregor often try to steal (or "exfiltrate") information. TAs can then require an additional settlement in exchange for not divulging this information on the dark web. Sadly, there exists no method to guarantee that exfiltrated files have been completely erased by the TA. In fact, in many cases the hacker has limited control about where the information ends up. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of privacy lawyers, conducting an inventory of data were stolen, and sending the required notifications to affected entities. In general, paying an exfiltration ransom is not recommended.
Progent's Background
Progent has provided remote and on-premises IT services across the U.S. for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes consultants who have earned advanced certifications in core technology platforms such as Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's data security consultants have earned prestigious certifications including CISA, CISSP-ISSAP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has top-tier support in financial and Enterprise Resource Planning application software. This breadth of skills allows Progent to identify and consolidate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them quickly into a viable network. Progent has worked with top insurance providers like Chubb to help businesses recover from ransomware attacks.
Contact Progent about Ransomware Settlement Negotiation Expertise in Porto Alegre
To contact with Progent about crypto-ransomware settlement guidance in Porto Alegre, call Progent at
Select Topic: