Ransomware Response Consultants
Ransomware Settlement Negotiation Services
Progent's Ransomware Negotiation Consulting in Midland
Progent is experienced in negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complicated activity that requires a mix of field experience, technical knowledge and business savvy. It also demands working closely with the victim's IT team and the cyber insurance carrier, if any. Because the top priority of the ransomware target is operational continuity, it is critical to deploy recovery teams that operate effectively, in parallel, and in close communication. Progent has the scope of IT knowledge and the depth of personnel to supplement your network staff and recover your network quickly and economically.
Services offered by Progent's ransomware settlement experts include:
- Establishing the type of ransomware used in the attack
- Identifying and communicating with the hacker
- Assessing the recovery risk
- Testing the TA's decryption tool
- Agreeing on a settlement with the ransomware victim and the cyber insurance provider
- Negotiating a settlement amount and timeline with the threat actor
- Confirming adherence to anti-money laundering laws
- Carrying out the crypto-currency payment to the TA
- Acquiring, learning, and operating the hacker's decryption mechanism
- If needed, contacting the TA for technical assistance with the decryptor tool
- Quarantining infected endpoints to arrest the progress of the assault
- Creating replicas of every compromised device and data store to allow forensics in parallel with restoration
- Installing A/V protection to all clean endpoints
- Restoring data from offline restores or unscathed endpoints
- Creating a pristine environment
- Mapping and connecting drives to match exactly their pre-encryption condition
Exfiltration Ransoms
In addition to extorting money for a decryption tool, modern strains of crypto-ransomware such as Ryuk, Sodinokibi, DopplePaymer, and Egregor often attempt to steal (or "exfiltrate") information. TAs can then require an extra payment for not posting this information or selling it. Sadly, there exists no method to guarantee that exfiltrated files have been totally deleted by the threat actor. In fact, in numerous instances the hacker has little say over data custody. Paying an exfiltration ransom does not free you from the need for seeking the advice of legal counsel, performing an audit on which files were stolen, and performing the mandated notifications to impacted entities. In general, paying an exfiltration ransom is a waste.
Progent's Background
Progent has provided remote and onsite network services throughout the U.S. for over two decades and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity practice areas. Progent's team of SMEs includes professionals who have been awarded advanced certifications in core technologies including Cisco networking, VMware, and popular distributions of Linux. Progent's cybersecurity experts have earned prestigious certifications including CISA, CISSP, CRISC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers guidance in financial and Enterprise Resource Planning application software. This scope of skills gives Progent the ability to identify and consolidate the surviving pieces of your IT environment after a ransomware assault and reconstruct them quickly into a viable system. Progent has worked with top insurance providers like Chubb to assist businesses clean up after ransomware assaults.
Contact Progent about Ransomware Settlement Expertise in Midland
To get in touch with Progent about crypto-ransomware settlement services in Midland, phone Progent at
Select Topic: