Breaking Bad Actors - Transforming Threat Intelligence into RaaS Resilience

Explore how to transform threat intelligence into effective ransomware-as-a-service (RaaS) resilience through comprehensive data analysis in this 27-minute conference presentation from the SANS Ransomware Summit 2025. Learn to leverage leak site data as the cyber equivalent of real-world crime statistics to understand and combat ransomware threats more effectively. Discover insights from PwC Global Threat Intelligence team's first-hand telemetry, collection methods, and incident response engagements to gain a unique perspective on the evolving threat landscape. Examine the transformation of the RaaS ecosystem from traditional actor identification to a more fluid, agile model featuring sophisticated affiliate programs and rapidly scaling operations. Analyze shifting targeting strategies across different sectors and countries, enriched with real-world context from actual incident response cases. Investigate the impact of law enforcement operations on major RaaS groups like Conti, LockBit, and affiliates such as Scattered Spider, and understand how increased pressure may be driving operators toward smaller, more agile brands in a "death by a thousand cuts" strategy. Gain actionable intelligence for defending networks and learn how to inform both tactical and strategic decision-making processes in your organization's response to the RaaS ecosystem through data-driven methodologies similar to those used in combating traditional crime.