勒索软件集团：卡特尔还是扭曲的科技独角兽？.pdf

《勒索软件集团：卡特尔还是扭曲的科技独角兽？.pdf》由会员分享，可在线阅读，更多相关《勒索软件集团：卡特尔还是扭曲的科技独角兽？.pdf（34页珍藏版）》请在三个皮匠报告上搜索。

1、Get Proactive|Gain ControlRansomware Syndicates:Cartels or Twisted Tech Unicorns?Ferhat DikbiyikChief Research&Intelligence OfficerJanuary 20252Black Kite Confidential“If you know the enemy and know yourself,you need not fear the results of a hundred battles.”Sun Tzu,Art of WarBlack Kite Confidentia

2、lCartels*vs Ransomware GroupsBoth ask for ransom for the assets that they hold hostage.But do they share the same mindset?3(*)Cartels are organized crime groups that use violence,intimidation,and secrecy to control illegal operations and maximize profits,often disregarding the harm they cause to com

3、munities.4AspectCartelsRansomware GroupsPrimary MotivationTerritorial control,power,and financial gain.Financial gain through ransom paymentsJustificationOften seen as survival in socio-economic contexts.Framed as providing security services(post-paid pentest).Awareness of HarmFully aware they harm

4、individuals and communities.Claim to avoid harm,sometimes apologizing for unintended victims.StructureHierarchical,with strong central leadership.Decentralized,with affiliates and service providers(Ransomware-as-a-Service).RecruitmentCoercion or exploitation of socio-economic vulnerabilities.Skilled

5、 professionals voluntarily join for lucrative pay.Technology Use Minimal,mainly for communication and logistics.Extensive use of advanced tools,including encryption,data analytics,and marketing intelligence.5AspectCartelsRansomware GroupsPublic PerceptionFeared and reviled,seen as criminal organizat

6、ions.Attempt to frame themselvesas ethical service providers”in some cases.Methods of OperationViolence,physical intimidation,and trafficking.Digital infiltration,extortion,and data encryption.Geographic ReachLimited by physical borders and supply chains.Global reach,limited only by internet access.