How Ransomware Gangs Use Automation, and How You Can Beat It
Recorded Future outlines ten automation strategies ransomware gangs use, from credential marketplaces to bulletproof hosting, urging intelligence-led defense.
A Recorded Future blog post promoting an Insikt Group report and webinar describes how ransomware gangs leverage automation across their attack cycles. The Insikt Group identified ten key strategies, including selling breached credential databases on underground forums, checkers and brute-forcers for validating stolen credentials, loaders and crypters for evading antivirus, banking injects, exploit kits, spam and phishing services, bulletproof hosting services, sniffers, and automated marketplaces for selling stolen credentials and digital fingerprints. The post argues defenders should adopt intelligence-led automation to counter the speed and scale of automated criminal tooling.
- Insikt identified ten automation strategies: credential database sales, checkers, brute-forcers, loaders, crypters, and exploit kits.
- Stolen credentials from automated marketplaces enable privilege escalation, fraud, and further breaches.
- Gangs use bulletproof hosting, spam/phishing services, sniffers, and automated marketplaces to scale operations.
- Defenders face a detection treadmill as actors rotate infrastructure; Recorded Future recommends intelligence-led automation.
- Vendors
- Recorded Future
- Malware
- loaderscrypterskeyloggers
- Organizations
- Insikt Group
From the original article
3 min read at recordedfuture.com
Few topics spark conversation like security automation. Automation is the entire premise around programming; routines and repetitive patterns are tasked to computers while humans work only on higher priorities. For security practitioners, this is essential because even a small network can have thousands of endpoints that need protecting while the security staff is miniscule.
By SAM LANGROCK · recordedfuture.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.