{"id":16743,"date":"2021-09-13T16:14:39","date_gmt":"2021-09-13T15:14:39","guid":{"rendered":"http:\/\/riskinsight-prepro.s189758.zephyr32.atester.fr\/?p=16743"},"modified":"2021-09-15T08:19:05","modified_gmt":"2021-09-15T07:19:05","slug":"newsletter-cert-w-from-the-front-line-summer-2021","status":"publish","type":"post","link":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/09\/newsletter-cert-w-from-the-front-line-summer-2021\/","title":{"rendered":"Newsletter CERT-W, from the front line – Summer 2021"},"content":{"rendered":"\n
\"\"<\/figure>\n

DECRYPTION<\/strong><\/h1>\n

The underground economy of the ransomware<\/h2>\n

In recent years the products of the underground economy have evolved quickly. Cyber criminals now offer services for others to purchase, the most popular being: Ransomware-as-a-service (RaaS).<\/strong><\/p>\n

Let\u2019s pretend you are a hacker<\/strong> aiming to launch a successful ransomware attack. Only, you are quite new to the business. What do you think you need? A very sophisticated level of coding and development skills? Not anymore. The whole underground economy of RaaS can provide you with every necessary element to conduct your attack, from the access credentials to the mixers helping you to launder your gains.<\/p>\n

What do I need for my ransomware attack? <\/strong><\/p>\n

Need #1<\/strong> \u2013 <\/strong>Enter my target\u2019s network.<\/strong> In order to do so, you need to acquire access to the victim\u2019s network: your first providers are the initial access brokers (IABs)<\/strong> or botmasters.<\/strong><\/p>\n

They are specialized in vulnerability exploit. They identify the flaws through massive phishing campaigns and\/or scans and then access the system. <\/strong>Once inside, they set up remote persistent access <\/strong>to the target\u2019s network. The botmasters then sell you the access: depending on its level of quality, prices can range from $1K to $100K (seen for a Mexican government body). The average price for network access in 2020 was $5,400.<\/a> The botmaster\u2019s services also include information on the financial health of the targeted victim, to help the attacker set the highest realistic price for the ransom<\/p>\n

Need #2<\/strong> \u2013 Anonymous<\/strong> infrastructure to host my hacking tools and store my data<\/strong>. <\/strong>The second actor of the chain is the bulletproof hoster<\/strong>, providing you with infrastructure-as-a-service, including anonymization services. The subscription can go from $5 per month to any price.<\/a><\/p>\n

Need #3 \u2013 A ransomware to encrypt my victim\u2019s files! <\/strong><\/p>\n

Now the main part: where can you find a ransomware? The most popular way is to subscribe to a RaaS platforms<\/strong>, offering 4 main services:<\/p>\n