Ransomware Solutions Consultants
Ransomware Settlement Consultants
Overview of Progent's Ransomware Settlement Negotiation Services in Richmond
Progent has experience negotiating ransomware settlements with adversaries. Reaching an acceptable settlement is a complex exercise that requires a mix of field experience, technical knowledge and business acumen. It also demands close co-operation with the cyber-extortion target's IT team and the cyber insurance carrier, if any. Since the top priority of the ransomware victim is operational continuity, it is vital to deploy recovery groups that operate efficiently, in parallel, and with intimate collaboration. Progent has the breadth of technical knowledge and the depth of personnel to supplement your IT support team and recover your network quickly and affordably.
Services available from Progent's ransomware settlement team include:
- Determining the kind of ransomware used in the attack
- Making contact with the hacker persona
- Evaluating the recovery risk
- Verifying the hacker's decryption tool
- Deciding on an acceptable settlement range with the victim and the cyber insurance carrier
- Establishing a settlement amount and timeline with the threat actor
- Checking adherence to anti-money laundering (AML) sanctions
- Overseeing the crypto-currency payment to the TA
- Receiving, learning, and operating the TA's decryption utility
- If necessary, contacting the threat actor for assistance with the decryption utility
- Quarantining affected endpoints to arrest the spread of the attack
- Making replicas of each infected device and data store in order to perform forensics without interfering with restoration
- Adding anti-virus protection to all clean endpoints
- Recovering files from offline restores or uncompromised machines
- Creating a pristine environment
- Remapping and connecting datastores to reflect exactly their pre-attack condition
Paying Exfiltration Ransoms
Beyond extorting money for a decryption tool, modern strains of ransomware such as Ryuk, Maze, DopplePaymer, and Egregor commonly try to steal (or "exfiltrate") files. TAs are then able to demand a separate settlement for not posting this data or selling it. Sadly, there is no method to guarantee that exfiltrated files have been completely erased by the threat actor. Actually, in many cases the threat actor has little control about where the information ends up. Settling an exfiltration ransom does not eliminate the need for seeking the guidance of privacy attorneys, performing an audit on which files were taken, and performing the required alerts to affected entities. In almost all cases, paying an exfiltration ransom is not recommended.
Progent's Qualifications
Progent has delivered online and onsite IT services across the United States for more than 20 years and has earned Microsoft's Partner certification in the Datacenter and Cloud Productivity competencies. Progent's team of SMEs includes professionals who have earned advanced certifications in foundation technologies such as Cisco networking, VMware, and major Linux distros. Progent's cybersecurity consultants have earned internationally recognized certifications including CISM, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also offers top-tier support in financial management and Enterprise Resource Planning software. This scope of expertise allows Progent to identify and integrate the undamaged parts of your IT environment after a ransomware intrusion and reconstruct them rapidly into a viable system. Progent has worked with leading cyber insurance carriers like Chubb to assist organizations recover from ransomware attacks.
Contact Progent about Ransomware Settlement Expertise in Richmond
To get in touch with Progent about crypto-ransomware settlement guidance in Richmond, phone Progent at
Select Topic: