Ransomware Syndicates - Understanding Modern Cybercriminal Organizations

Explore a 28-minute SANS conference presentation that delves into the evolution of ransomware syndicates, examining their transformation from traditional criminal organizations into entities that mirror the agility and innovation of modern tech startups. Learn how these groups combine advanced technological capabilities with sophisticated psychological frameworks, operating with business-like efficiency while employing complex moral justifications for their activities. Discover the strategic depth of their operations, including target selection criteria, negotiation tactics, and public relations strategies, while understanding how they position themselves as ethical hackers, hacktivists, or reluctant cybersecurity enforcers. Gain practical insights into mitigation and negotiation strategies, analyze relevant case studies of attacks on various sectors including educational institutions and non-profits, and evaluate the effectiveness of traditional anti-crime methodologies when adapted for cybersecurity threats. Examine recent law enforcement successes against groups like Lockbit and Black Cat, while understanding how these criminal enterprises evolve in response to increased scrutiny and enforcement actions.