Ransomware Response Consulting Services
Ransomware Settlement Negotiation Services
Progent's Ransomware Negotiation Consulting in Baton Rouge
Progent has experience negotiating ransomware settlements with hackers. Reaching an optimum settlement is a complex activity that calls for a combination of field experience, technical skills and business acumen. It also requires working closely with the cyber-extortion target's IT staff and the insurance carrier, if there is one. Because the top priority of the ransomware target is fast recovery, it is critical to establish recovery teams that operate effectively, concurrently, and with intimate collaboration. Progent offers the scope of technical skills and the depth of personnel to supplement your network support team and recover your network environment quickly and economically.
Services provided by Progent's ransomware settlement team include:
- Determining the type of ransomware used in the attack
- Identifying and communicating with the hacker persona
- Assessing the recovery risk
- Verifying the threat actor's decryption tool
- Deciding on an acceptable settlement payment with the victim and the insurance carrier
- Establishing a settlement amount and schedule with the TA
- Checking compliance with anti-money laundering regulations
- Managing the crypto-currency disbursement to the hacker
- Receiving, reviewing, and operating the threat actor's decryption utility
- If needed, contacting the hacker for technical assistance with the decryption utility
- Isolating infected endpoints to arrest the spread of the assault
- Creating digital copies of every compromised server and endpoint and data store to allow forensics without interfering with restoration
- Installing anti-virus protection to all clean endpoints
- Recovering files from offline restores or uncompromised endpoints
- Building a pristine recovery environment
- Mapping and connecting datastores to match exactly their pre-attack state
Exfiltration Ransoms
In addition to extorting payment for a decryption tool, modern variants of ransomware such as Ryuk, Maze, DopplePaymer, and Nephilim commonly attempt to steal (or "exfiltrate") files. Hackers are then able to demand an extra payment for not posting this data on the dark web. Unfortunately, there exists no way to be certain that stolen files have been totally erased by the TA. Actually, in many instances the threat actor has limited say over the disposition of the data. Settling an exfiltration ransom does not free you from the necessity of getting the guidance of privacy lawyers, conducting an inventory of files were taken, and performing the required alerts to impacted entities. Generally, paying an exfiltration ransom is not recommended.
Progent's Qualifications
Progent has delivered remote and onsite network services throughout the United States for over two decades and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity practice areas. Progent's roster of subject matter experts (SMEs) includes consultants who have earned advanced certifications in foundation technology platforms such as Cisco networking, VMware virtualization, and major distributions of Linux. Progent's cybersecurity experts have earned industry-recognized certifications such as CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial and ERP applications. This breadth of skills allows Progent to salvage and integrate the undamaged pieces of your network following a ransomware intrusion and rebuild them quickly into a functioning network. Progent has collaborated with leading cyber insurance carriers including Chubb to assist organizations recover from ransomware attacks.
Contact Progent about Ransomware Settlement Services in Baton Rouge
To contact with Progent about crypto-ransomware settlement negotiation services in Baton Rouge, call Progent at
Select Topic: