From $10 to $30M: Operating in the Data-Extortion Aftermath
summary
Claims that multi-level extortion now mixes encryption, public leakage, DDoS and customer harassment, with active groups up 49% and leak events up 50%, and per-incident ransoms rising ~400% from 2024–25. Shows a LATAM case where a $10 credential sold on the dark web and a Hakon info stealer enable initial access, attackers exfiltrate 4 TB using common tools (e.g., WinSCP), a leaked script with an API key speeds containment, and ransom pressure escalates toward $30M; recommends mapped extortion playbooks, three parallel workstreams, legal, law enforcement and cyber insurance.
AI-written summary · about
chapters (6)
- 0:00Introduction
- 1:49Evolution of ransomware
- 10:01Current ransomware landscape
- 19:11Case study $10 to $30M
- 25:11Managing extortion types
- 31:32Q&A
related talks
40mA Review of the Ransomware Threat Landscape
52mMultifaceted Extortion: Insider Look at Ransom Payments and Cyber Defense
37mRansomware Resilience: Holistic Defense for SOC Leaders
40mRansomware Threat Landscape
27mFrom RATs to Extorting Multibillion Companies: The Evolution of a Modern Ransomware Group
33mLiving with Ransomware - The New Normal in Cyber Security
40mRansomware: New Recipe For An Old Dish
14mBehind the scenes w/ SentinelOne’s MDR: Detecting cloud ransomware