Security News > 2023 > July > Staying ahead of the “professionals”: The service-oriented ransomware crime industry

The demand for these services has led to criminal service providers springing up to supply these needs, and in an almost virtuous cycle of malice, this supply of cybercrime services enables the entire cybercrime threat landscape.

Actors can now buy malware, infrastructure, and phishing as a service; they can even easily purchase access to victims from initial access brokers.

The initial actor who compromises a network might sell that access to another actor who specifically wants to target that victim, their vertical, or geographic location.

The actors looking for those quick wins could now be using the exact same tools and persistent methods as leading multipoint of extortion ransomware groups.

Opportunities for defenders do arise from this new landscape if multiple actors are using the same tools and methods, and even if it's because they are effective and efficient, that is an overlap that can be focused upon.

Act first - Implement pre-emptive detections and controls for those common tools, methods, and paths, as well as access controls and restrictions around data and functions.

News URL

https://www.helpnetsecurity.com/2023/07/12/ransomware-industry-profitability/