The cybercrime supply chain has five stages, each with a price
Vigilant's CEO outlines the five-stage cybercrime supply chain, from $5-$50 credential logs through RaaS affiliates to laundering, plus cookie-based MFA bypass.
In a Help Net Security video, Vigilant CEO Chris Nyhuis argues the lone ransomware attacker image is 15 years out of date and describes five businesses inside the cybercrime supply chain. The stages are infostealer harvesters, brokers who verify and resell access, ransomware-as-a-service operators, affiliates who run intrusions, and launderers. He notes stolen credential logs sell for $5 to $50, broker listings stay under $1,000, and stolen session cookies let attackers bypass multi-factor authentication.
- Five-tier ecosystem: harvesters, brokers, RaaS operators, affiliates, launderers
- Stolen credential logs sell for $5-$50; broker listings priced under $1,000
- Stolen session cookies let intruders skip multi-factor authentication
Full article111 words · extracted from helpnetsecurity.com · click to collapse
In this Help Net Security video, Chris Nyhuis, CEO at Vigilant, explains why the picture of a lone ransomware attacker is about 15 years out of date.
He walks through the cybercrime supply chain and the five businesses inside it: harvesters who run infostealer malware, brokers who verify and resell access, ransomware-as-a-service operators who build the toolkit, affiliates who run the intrusion, and launderers who move the proceeds.
Nyhuis covers what each stage costs, from stolen credential logs that sell for $5 to $50 to broker listings priced under $1,000, and how stolen session cookies let an attacker skip multi-factor authentication.
Download report: How security controls perform in practice
Text extracted automatically; images, tables and formatting may be missing. Original: https://www.helpnetsecurity.com/2026/08/25/cybercrime-supply-chain-video/