Session

Ghost in the RaaS: Ransomware-as-a-Service from the perspective of an affiliate

From Conti to Qilin and from Bassterlord to Notchy, many things have changed in the Ransomware-as-a-Service scene: partner programs have been upgraded, forums have changed their posting and announcement rules, old groups have been shut down, and new names are emerging every day, while some just change their „brand” …

But even with all this change, and some believe in decline, we know that war never changes, and the fight against RaaS remains constant.

The talk aims to shed light on what is commonly referred to as the DarkWeb by sensationalist media by presenting listeners with real information about how Ransomware-as-a-Service operations work from an affiliate’s perspective. And with all that in mind, I ask you: What does it take to kill a RaaS operation?

About the speaker

Carlos Ishimaru

Carlos Ishimaru

Carlos Ishimaru is a Threat Intelligence Analyst and Researcher. His research focuses on reverse engineering, HUMINT, and anonymization.
Read more …
Copyright © 2025
 
Swiss Cyber Storm
Hosting graciously provided for free by Nine