Today’s Ransomware Economy Players – IABs, RaaS Affiliates, and now C2Ps – Jon Miller – BH23 #2

During this segment, Jon will explore today’s ransomware economy players from IABS to RaaS affiliates, to money launders and now C2Ps. For the discussion, Jon will leverage Halcyon’s latest research, which demonstrates a new technique to uncover how C2Ps, like Cloudzy, are used to identify upcoming ransomware campaigns and other advanced attacks. The research revealed that Cloudzy, knowingly or not, provided services to attackers while assuming a legitimate business profile. Threat actors that leveraged Cloudzy include APT groups tied to the Chinese, Iranian, North Korean, Russian, Indian, Pakistani, and Vietnamese governments; a sanctioned Israeli spyware vendor whose tools are known to target civilians; several criminal syndicates and ransomware affiliates whose campaigns have spurred international headlines.

He will also reference findings from Halcyon’s 2022 Ransomware Malicious Quartile (RMQ).

Segment Resources: • Cloudzy research - https://www.halcyon.ai/blog/report-ransomware-command-and-control-providers-unmasked-by-halcyon-researchers • 2022 RMQ - https://www.halcyon.ai/blog/power-rankings-2022-ransomware-malicious-quartile

This segment is sponsored by Halcyon. Visit https://securityweekly.com/halcyonbh to learn more about them!