BS TT 3 / The post-Cronos ransomware world: lies, trickery, ambition

In December 2023 and February 2024, the BlackCat and LockBit ransomware gangs were disrupted by law enforcement. Both gangs quickly reappeared, sowing doubt about the effect of these disruptions, but time showed that they paid off by completely discontinuing BlackCat activities and considerably limiting LockBit’s propagation with Operation Cronos.
These events had unprecedented effects on the ransomware world. This presentation will look at how ESET has closely tracked the steep rise of the new top players – mainly the recently established ransomware-as-a-service (RaaS) gang RansomHub and the seasoned Play, which insists that it doesn’t operate as RaaS. The presentation will also look at trends in ransomware activity in 2024, as well as ransom payments – offering insights into new unexpected activity and how companies in attendance can navigate the ever-changing ransomware ecosystem.

Jakub Soucek Bio
Jakub Souček is a Senior Malware Researcher at ESET with 10 years of experience in the field. He currently leads ESET’s crimeware research team focused on battling ransomware. He has also managed botnet disruption collaboration efforts with external partners and law enforcement and has experience with APT research as well. Besides that, he focuses on in-depth analysis of malware and long-term tracking of prevalent malware families.

Breakout Session Tech Track RESEARCH

More presentations from Jakub Soucek: Breakout Session - Press Track , BS PT 2 / Exclusive Research Presentation II.