Initial Access Merchant Offerings & Ransomware Victims: Mapping Breached Entities & Threat Actors скачать в хорошем качестве

Initial Access Merchant Offerings & Ransomware Victims: Mapping Breached Entities & Threat Actors

SANS Ransomware Summit 2022 Speakers: Samantha Van de Ven, Cyber Threat Intelligence Analyst, Intel471 Beth Allen, Senior Intelligence Analyst, Intel471 As initial access merchants continue to significantly impact financially motivated ransomware activity in the cyber underground, it is important to gain a better understanding of the connection between network access offerings and ransomware breaches. Intel 471 analyzed victims of compromised access and ransomware operators' victims' blog posts to determine patterns and relationships. These include the average dwell time between the first initial access offering and a subsequent ransomware-as-a-service (RaaS) affiliate program posting the breached entity on their ransomware blog. Highlighting specific examples from the cyber underground ecosystem, we offer actionable takeaways and insights into the evolving relationships and activity patterns of the most prominent cyber underground initial access merchants and ransomware operators. View upcoming Summits: http://www.sans.org/u/DuS Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE