Clustering Attacker Behavior: Connecting the Dots in the RaaS Ecosystem

As ransomware-as-a-service (RaaS) offerings arose on the scene, the volume and variety of ransomware attacks greatly expanded. Now, dozens of affiliates are deploying the same variant, leading to differing attack chains depending on who's behind the intrusion. This session walks through organizational clustering efforts when it comes to the messy world of ransomware affiliates and highlights how to separate the common tactics from the narrow details that may be indicative of a specific affiliate. Featuring case studies of two Threat …

as-a-service attack attack chains attacker attacks clustering ecosystem intrusion raas ransomware ransomware attacks service session