- May 4, 2019
- 801
Experienced network intruders and ransomware groups have struck an alliance helping each other monetize their skills by spreading malware to company networks.
One access-as-a-service provider works with multiple ransomware collectives, including REvil/Sodinokibi, offering them access to large targets.
Symbiotic relationship
High-profile ransomware actors like REvil focus on companies and are in constant need of new victims to keep the business humming.
Experts in breaching corporate networks advertise their talent on underground markets or over secure messenger communication and are the perfect partner.
Intruders hack into the network of a company and then rent or sell access to a ransomware team. This mutually beneficial cooperation enables spreading file-encrypting malware even on more secure networks.
Research from Advanced Intelligence (AdvIntel) reveals the strong connection between the two types of cybercriminal operations.
REvil Ransomware Affiliates Partner with Corporate Intruders
Experienced network intruders and ransomware groups have struck an alliance helping each other monetize their skills by spreading malware to company networks.
www.bleepingcomputer.com