Ransomware Response Services
Ransomware Settlement Services
Overview of Progent's Ransomware Negotiation Services in Ribeirão Preto
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex activity that calls for a combination of field experience, IT skills and business acumen. It also calls for close co-operation with the victim's IT staff and the cyber insurance carrier, if any. Because the number one goal of the ransomware victim is operational continuity, it is vital to establish response teams that operate effectively, concurrently, and with intimate collaboration. Progent offers the scope of IT knowledge and the deep bench of experts to complement your IT support team and recover your network environment quickly and affordably.
Services available from Progent's ransomware settlement negotiation team include:
- Determining the kind of ransomware involved in the attack
- Identifying and contacting the hacker
- Assessing the likelihood of recovery
- Validating the threat actor's decryption tool
- Determining a settlement amount with the victim and the insurance provider
- Negotiating a settlement amount and timeline with the TA
- Checking adherence to anti-money laundering regulations
- Managing the crypto-currency disbursement to the TA
- Acquiring, learning, and using the TA's decryption utility
- If necessary, contacting the TA for assistance with the decryptor tool
- Quarantining affected endpoints to arrest the progress of the attack
- Creating digital copies of every infected server and endpoint and data store to allow forensics without interfering with recovery
- Installing A/V agents to all clean endpoints
- Recovering data from offline backups or uncompromised endpoints
- Building a pristine recovery environment
- Mapping and reconnecting drives to match precisely their pre-attack condition
Settling Exfiltration Ransoms
Beyond extorting payment for a decryption tool, modern variants of crypto-ransomware such as Ryuk, Sodinokibi, Netwalker, and Nephilim commonly attempt to exfiltrate files. TAs are then able to demand a separate payment for not divulging this data or selling it. Sadly, there exists no way to be certain that exfiltrated files have been totally erased by the threat actor. Actually, in numerous cases the TA has little control over data custody. Settling an exfiltration ransom does not eliminate the necessity of seeking the advice of privacy attorneys, conducting an inventory of files were compromised, and sending the necessary alerts to affected entities. In almost all cases, paying an exfiltration ransom is a waste.
Progent's Background
Progent has provided online and on-premises IT services across the United States for over 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes consultants who have earned high-level certifications in foundation technologies such as Cisco networking, VMware virtualization, and popular distributions of Linux. Progent's data security consultants have earned industry-recognized certifications including CISM, CISSP, CRISC, and CMMC 2.0. (Refer to certifications earned by Progent consultants). Progent also has top-tier support in financial and Enterprise Resource Planning applications. This breadth of skills gives Progent the ability to identify and integrate the surviving parts of your IT environment following a ransomware assault and rebuild them rapidly into a viable system. Progent has collaborated with leading insurance carriers including Chubb to assist organizations recover from ransomware assaults.
Contact Progent about Crypto-Ransomware Settlement Negotiation Expertise in Ribeirão Preto
To contact with Progent about crypto-ransomware settlement negotiation expertise in Ribeirão Preto, call Progent at
Select Topic: