Help Irongeek.com pay for bandwidth and research equipment:
Turn down for RaaS: Seperating hype from reality in the ransomware as a service market - Allan Liska (BSides Tampa 2020) (Hacking Illustrated Series InfoSec Tutorial Videos)
Turn down for RaaS: Seperating hype from reality in the ransomware as a service market
BSides Tampa 2020
Abstract: Starting in mid-2018 and continuing through 2019 there has been an explosion in ransomware attacks. Part of the growth in ransomware is attributable to a big uptick in Ransomware as a Service (RaaS) offerings. RaaS allows even novice cybercriminals quickly become ransomware kingpins, at least that is the promise. The reality is very different.
The presentation will look at popular RaaS offerings to see the costs associated with them and the capabilities presented as well the reception of these offerings. I will then contrast success in marking in underground forums with real world success in exploiting victims, does the hype in underground forums actually translate to success in exploitation?
Allan Liska is an intelligence analyst at Recorded Future. Allan has more than 15 years? experience in information security and has worked as both a blue teamer and a red teamer for the intelligence community and the private sector. Allan has helped countless organizations improve their security posture using more effective and integrated intelligence. Allan is also one of the organizers of BSides Bordeaux and has presented at security conferences around the world. He is the author of The Practice of Network Security, Building an Intelligence-Led Security Program, and Securing NTP: A Quickstart Guide and the co-author of DNS Security: Defending the Domain Name System and Ransomware: Defending Against Digital Extortion.