Ransomware Response Consultants
Ransomware Negotiation Consultants
Overview of Progent's Ransomware Settlement Negotiation Services in Shreveport
Progent is experienced in negotiating ransomware settlements with hackers. Negotiating an acceptable settlement is a complicated exercise that calls for a combination of field experience, IT knowledge and business savvy. It also requires close co-operation with the ransomware victim's IT staff and the cyber insurance provider, if any. Since the top goal of the ransomware victim is operational continuity, it is critical to establish response teams that work effectively, in parallel, and with intimate collaboration. Progent has the scope of technical skills and the depth of personnel to complement your network support team and recover your network environment quickly and affordably.
Services offered by Progent's ransomware negotiation experts include:
- Establishing the type of ransomware used in the assault
- Identifying and contacting the hacker persona
- Assessing the recovery risk
- Validating the TA's decryption capabilities
- Agreeing on a settlement range with the victim and the cyber insurance provider
- Establishing a settlement and timeline with the hacker
- Confirming adherence to anti-money laundering (AML) sanctions
- Carrying out the crypto-currency transfer to the hacker
- Acquiring, reviewing, and using the hacker's decryptor tool
- If necessary, contacting the hacker for technical help with the decryptor tool
- Isolating infected endpoints to prevent further progress of the attack
- Making digital copies of every compromised device and data store in order to perform forensics in parallel with recovery
- Installing A/V protection to all clean endpoints
- Restoring files from offline backups or uncompromised machines
- Building a clean environment
- Mapping and connecting datastores to reflect exactly their pre-encryption state
Exfiltration Ransoms
In addition to demanding payment for a decryption utility, current strains of ransomware like Ryuk, Maze, Netwalker, and Nephilim commonly attempt to exfiltrate information. TAs can then require an additional ransom for not publishing this data on the dark web. Unfortunately, there is no way to prove that stolen data have been completely erased by the TA. Actually, in many cases the TA has limited say over where the information ends up. Paying an exfiltration ransom does not free you from the necessity of engaging the advice of legal counsel, conducting an audit on which data were compromised, and carrying out the necessary notifications to impacted entities. Generally, paying an exfiltration ransom is not recommended.
Progent's Qualifications
Progent has provided online and on-premises IT services across the United States for over 20 years and has earned Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's team of subject matter experts includes professionals who have earned advanced certifications in core technologies such as Cisco infrastructure, VMware virtualization, and major distributions of Linux. Progent's data security consultants have earned internationally recognized certifications including CISA, CISSP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial management and ERP applications. This scope of expertise gives Progent the ability to identify and integrate the undamaged parts of your information system after a ransomware assault and reconstruct them quickly into an operational system. Progent has worked with top cyber insurance carriers including Chubb to help businesses clean up after ransomware assaults.
Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Shreveport
To get in touch with Progent about crypto-ransomware settlement services in Shreveport, phone Progent at
Select Topic: