Ransomware Solutions Consulting Services
Crypto-Ransomware Settlement Services
Overview of Progent's Ransomware Settlement Negotiation Consulting in Vancouver
Progent has experience negotiating ransomware settlements with adversaries. Reaching an optimum settlement is a complex activity that requires a combination of real-word experience, IT knowledge and business savvy. It also calls for working closely with the victim's IT team and the cyber insurance provider, if any. Since the top priority of the ransomware victim is fast recovery, it is vital to establish recovery groups that work efficiently, in parallel, and in close communication. Progent has the scope of technical skills and the depth of personnel to supplement your network support team and recover your network environment rapidly and economically.
Services provided by Progent's ransomware negotiation team include:
- Establishing the kind of ransomware involved in the assault
- Identifying and contacting the hacker persona
- Assessing the likelihood of recovery
- Verifying the TA's decryption tool
- Determining a settlement range with the victim and the insurance carrier
- Establishing a settlement amount and schedule with the hacker
- Confirming compliance with anti-money laundering (AML) sanctions
- Carrying out the crypto-currency transfer to the TA
- Receiving, reviewing, and using the TA's decryptor mechanism
- If necessary, contacting the hacker for assistance with the decryptor utility
- Isolating infected endpoints and data stores to prevent further spread of the attack
- Making replicas of each breached server and endpoint and data store in order to perform forensics in parallel with restoration
- Installing anti-virus protection to all clean endpoints
- Restoring files from air-gapped restores or unscathed machines
- Creating a pristine recovery environment
- Mapping and reconnecting drives to match exactly their pre-encryption condition
Exfiltration Ransoms
In addition to demanding money for a decryption utility, current variants of ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to exfiltrate information. TAs can then demand an extra settlement in exchange for not posting this information on the dark web. Unfortunately, there exists no way to guarantee that exfiltrated files have been totally deleted by the hacker. Actually, in many cases the hacker has little say over who can access the stolen files. Paying an exfiltration ransom does not free you from the need for getting the advice of privacy lawyers, conducting an investigation into which data were taken, and sending the necessary notifications to impacted entities. In general, paying an exfiltration ransom is not recommended.
Progent's Qualifications
Progent has provided remote and on-premises IT services throughout the United States for more than 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's roster of SMEs includes professionals who have been awarded high-level certifications in foundation technologies including Cisco networking, VMware, and major distributions of Linux. Progent's data security experts have earned internationally recognized certifications such as CISA, CISSP, CRISC, and CMMC 2.0. (Refer to Progent's certifications). Progent also offers top-tier support in financial and ERP software. This scope of skills gives Progent the ability to identify and integrate the undamaged parts of your information system following a ransomware attack and rebuild them rapidly into an operational network. Progent has collaborated with top cyber insurance providers including Chubb to assist organizations clean up after ransomware assaults.
Contact Progent about Crypto-Ransomware Settlement Guidance in Vancouver
To get in touch with Progent about ransomware settlement expertise in Vancouver, phone Progent at
Select Topic: