一次受害永远受害深入探究网络勒索Cy-X生态系统及其参与者的日益绝望

Once a victim, always a victimA dive into the ecosystem of Cyber Extortion (Cy-X) and the increasing desperation of itsparticipantsDiana Selck-Paulsson & Simone KrausLead Security ResearcherSenior CSIRT Analyst@ Orange Cyberdefense Agenda Cyber Extortion(Cy-X) / RansomwareEcosystemRe-victimizationof victimsThreat ActorsToolsCy-X brandsOperators RaaS Affiliates Cy-X is a form of computer crime in which the security of a corporate digital asset (Confidentiality, Integrity or Availability) is compromised and exploited in a threat of some form to extort a payment.Cyber Extortion (Cy-X) / Ransomware & how we trackit Allan Liska https://twitter.com/uuallan/status/1441936468729946114Re-postingvictimsWhat is it that we are seeing? •Act = Re-post! •Re-compromise? •Phenomenon = Re-victimization!•Reveal? LockBitBianLian3 daysContiAkira702 daysincransomincransom237 daysNefilimBabuk49 dayscactus869 daysCl0pLockBit207 daysDisspossesor81 dayshunters130 daysRe-victimization•Methodology•13,308 victims•