Ransomware Response Consulting Experts
Ransomware Settlement Services
Progent's Ransomware Settlement Negotiation Services in Lubbock
Progent has experience negotiating ransomware settlements with attackers. Negotiating an acceptable settlement is a complicated exercise that requires a mix of field experience, technical knowledge and business acumen. It also demands working closely with the cyber-extortion target's IT team and the cyber insurance provider, if any. Because the top priority of the ransomware victim is fast recovery, it is critical to deploy response groups that work effectively, concurrently, and with intimate collaboration. Progent has the breadth of IT knowledge and the depth of personnel to supplement your network support team and recover your network quickly and affordably.
Support provided by Progent's ransomware settlement team include:
- Establishing the type of ransomware involved in the attack
- Making contact with the hacker
- Assessing the likelihood of recovery
- Validating the threat actor's decryption capabilities
- Deciding on an acceptable settlement payment with the ransomware victim and the insurance provider
- Establishing a settlement and timeline with the hacker
- Checking compliance with anti-money laundering (AML) sanctions
- Managing the crypto-currency payment to the hacker
- Receiving, learning, and operating the threat actor's decryption tool
- If necessary, contacting the threat actor for assistance with the decryptor tool
- Isolating infected endpoints to arrest the spread of the assault
- Creating digital copies of every breached server and endpoint and data store to allow forensics in parallel with cleanup
- Installing A/V protection to all clean endpoints
- Salvaging files from air-gapped backups or unscathed endpoints
- Creating a clean environment
- Remapping and reconnecting drives to reflect precisely their pre-encryption state
Paying Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern strains of ransomware like Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to steal (or "exfiltrate") files. TAs can then require an extra ransom in exchange for not publishing this information on the dark web. Unfortunately, there exists no way to guarantee that exfiltrated files have been totally erased by the hacker. In fact, in many instances the TA has little say over the disposition of the data. Settling an exfiltration ransom does not free you from the need for seeking the guidance of privacy lawyers, performing an inventory of data were taken, and performing the required alerts to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.
Progent's Qualifications
Progent has delivered remote and onsite IT services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have earned advanced certifications in core technologies including Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned industry-recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (See Progent's certifications). Progent also offers top-tier support in financial and ERP software. This breadth of skills gives Progent the ability to salvage and consolidate the undamaged parts of your IT environment following a ransomware attack and reconstruct them rapidly into an operational system. Progent has worked with top cyber insurance providers including Chubb to assist businesses recover from ransomware attacks.
Contact Progent about Crypto-Ransomware Settlement Negotiation Services in Lubbock
To contact with Progent about ransomware settlement expertise in Lubbock, phone Progent at
Select Topic: