Ransomware Response Services
Crypto-Ransomware Negotiation Expertise
Progent's Ransomware Settlement Negotiation Consulting in Akron
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complex exercise that calls for a combination of real-word experience, technical knowledge and business acumen. It also demands close co-operation with the ransomware victim's IT staff and the insurance provider, if any. Since the top priority of the ransomware target is fast recovery, it is vital to establish recovery teams that work effectively, concurrently, and with intimate collaboration. Progent offers the breadth of technical knowledge and the depth of experts to supplement your IT staff and recover your network quickly and economically.
Services provided by Progent's ransomware settlement negotiation team include:
- Determining the type of ransomware involved in the assault
- Identifying and contacting the hacker persona
- Assessing the likelihood of recovery
- Verifying the TA's decryption tool
- Agreeing on a settlement payment with the victim and the insurance carrier
- Establishing a settlement amount and schedule with the threat actor
- Checking compliance with anti-money laundering laws
- Overseeing the crypto-currency transfer to the hacker
- Acquiring, reviewing, and operating the hacker's decryption utility
- If necessary, contacting the hacker for technical assistance with the decryptor utility
- Isolating infected endpoints to prevent further progress of the attack
- Making digital copies of each breached device and data store to allow forensics in parallel with recovery
- Installing A/V protection to all clean endpoints
- Salvaging data from offline backups or unscathed machines
- Creating a clean environment
- Remapping and connecting datastores to reflect exactly their pre-attack condition
Paying Exfiltration Ransoms
In addition to demanding money for a decryption utility, current strains of crypto-ransomware such as Ryuk, Maze, Netwalker, and Egregor commonly try to steal (or "exfiltrate") files. TAs are then able to require an additional settlement for not publishing this data or selling it. Unfortunately, there is no way to be certain that stolen files have been totally erased by the hacker. In fact, in many cases the TA has limited say about who can access the stolen files. Settling an exfiltration ransom does not free you from the need for engaging the guidance of legal counsel, conducting an inventory of data were taken, and carrying out the required alerts to affected entities. In general, paying an exfiltration ransom is not recommended.
Progent's Background
Progent has delivered online and on-premises IT services throughout the United States for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes consultants who have earned advanced certifications in core technologies including Cisco infrastructure, VMware, and major Linux distros. Progent's cybersecurity consultants have earned prestigious certifications such as CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also has guidance in financial management and ERP software. This broad array of expertise gives Progent the ability to salvage and integrate the surviving pieces of your IT environment following a ransomware intrusion and reconstruct them rapidly into a functioning system. Progent has worked with top cyber insurance providers including Chubb to assist organizations recover from ransomware assaults.
Contact Progent about Ransomware Settlement Guidance in Akron
To get in touch with Progent about ransomware settlement services in Akron, call Progent at
Select Topic: