Ransomware-as-a-service
Also called: RaaS · Ransomware as a Service
A business model in which a ransomware group rents out its encryptor, negotiation portal and leak site to affiliates who carry out the actual intrusions and share the ransom. It lowers the skill needed to attack, and because many affiliates use one brand, intrusion methods vary widely. Defend against the entry routes, such as exposed remote access and stolen credentials, rather than the brand name.
Further reading: www.ncsc.gov.uk
From the Security Academy
How Ransomware Gets Into a Company: From Initial Access to Double Extortion
How a ransomware attack unfolds, from initial access and lateral movement to backup deletion, data theft, encryption and extortion, and where to stop it.
8 min read ·
Advisories that mention this term
No advisories mention this term yet.