The effects of law enforcement takedowns on the ransomware landscape

While the results of law enforcement action against ransomware-as-a-service operators Alphv/BlackCat and LockBit are yet to be fully realized, the August 2023 disruption of the Qakbot botnet has had one notable effect: ransomware affiliates have switched to vulnerability exploitation as the primary method of delivering the malware. The switch is obvious to Symantec’s Threat Hunter Team but, unfortunately, it hasn’t been accompanied by a fall in the number of ransomware victims. “Analysis of data from … More →

The post …

action alphv as-a-service august blackcat botnet disruption don't miss effect enforcement exploitation hot stuff law law enforcement lockbit malware operators qakbot qakbot botnet ransomware redsense results service switch symantec takedowns trends vulnerability vulnerability exploitation