The cybersecurity industry continuously tracks how ransomware groups attack and who the newest victims are. However, we sometimes forget to look at how all these groups work behind the scenes and what kind of resources they use before and after an attack, from affiliate services to “client support” platforms. What’s behind this boom? Jose Miguel Esparza, head of threat intelligence at Outpost24, explains how RaaS operations work in today’s ecosystem.
The word ransomware is ever present in today’s world, with the number of attacks increasing exponentially. Indeed, threat actors and ransomware groups are utilizing Ransomware as a Service (RaaS) to its fullest. What is the RaaS ecosystem, and what advice can security professionals provide to best protect their organizations?
Keeping track of ransomware groups, their attack methods and their targets is no easy feat, but thanks to threat intelligence research and information sharing, we are continuing to learn more about these adversaries. These include examining their online forums, understanding how they deploy their attacks using tactics, techniques and procedures (aka TTPs), and reviewing the…
