Ransomware Solutions Services
Ransomware Negotiation Guidance
Overview of Progent's Ransomware Settlement Negotiation Consulting in Vitória
Progent has experience negotiating ransomware settlements with threat actors. Negotiating an optimum settlement is a complex exercise that calls for a combination of field experience, IT skills and business acumen. It also calls for working closely with the ransomware victim's IT team and the cyber insurance carrier, if any. Because the top priority of the ransomware victim is fast recovery, it is vital to establish recovery teams that work efficiently, in parallel, and with intimate collaboration. Progent has the breadth of technical skills and the depth of personnel to complement your network staff and restore your network environment rapidly and affordably.
Services provided by Progent's ransomware settlement negotiation experts include:
- Establishing the kind of ransomware involved in the attack
- Making contact with the hacker persona
- Evaluating the recovery risk
- Testing the threat actor's decryption tool
- Budgeting a settlement amount with the victim and the insurance provider
- Establishing a settlement amount and timeline with the TA
- Confirming accordance with anti-money laundering sanctions
- Managing the crypto-currency transfer to the TA
- Acquiring, learning, and operating the threat actor's decryption tool
- If necessary, contacting the hacker for technical help with the decryption utility
- Isolating infected endpoints to prevent further progress of the assault
- Creating replicas of each breached server and endpoint and data store to allow forensics in parallel with recovery
- Installing anti-virus agents to all clean endpoints
- Salvaging files from air-gapped restores or unscathed endpoints
- Creating a pristine environment
- Remapping and connecting drives to reflect exactly their pre-attack condition
Settling Exfiltration Ransoms
Beyond demanding money for a decryption tool, current strains of ransomware like Ryuk, Maze, DopplePaymer, and Egregor often attempt to exfiltrate files. Hackers are then able to demand an extra settlement for not divulging this information on the dark web. Unfortunately, there is no way to prove that stolen files have been completely erased by the threat actor. In fact, in numerous instances the TA has limited say about where the information ends up. Settling an exfiltration ransom does not eliminate the necessity of engaging the guidance of privacy attorneys, conducting an investigation into which files were compromised, and carrying out the mandated notifications to impacted entities. In almost all cases, paying an exfiltration ransom is not recommended.
Progent's Background
Progent has delivered online and onsite IT services across the U.S. for more than 20 years and has been awarded Microsoft's Partner designation in the Datacenter and Cloud Productivity competencies. Progent's roster of subject matter experts (SMEs) includes professionals who have earned advanced certifications in core technology platforms including Cisco infrastructure, VMware virtualization, and major Linux distros. Progent's cybersecurity experts have earned prestigious certifications including CISA, CISSP-ISSAP, GIAC, and CMMC 2.0. (See certifications earned by Progent consultants). Progent also has guidance in financial and Enterprise Resource Planning application software. This breadth of expertise gives Progent the ability to identify and integrate the undamaged pieces of your IT environment following a ransomware assault and reconstruct them quickly into an operational network. Progent has collaborated with top cyber insurance carriers like Chubb to assist organizations recover from ransomware assaults.
Contact Progent about Crypto-Ransomware Settlement Negotiation Guidance in Vitória
To get in touch with Progent about crypto-ransomware settlement negotiation services in Vitória, call Progent at
Select Topic: