Ransomware Rebranding: So Hot Right Now!
SANS Cyber Threat Intelligence Summit 2023
Ransomware Rebranding: So Hot Right Now!
Drew Schmitt, GRIT Lead Analyst, GuidePoint Security
Ransomware rebranding is becoming one of the most common techniques that ransomware groups are leveraging to obfuscate their operations and remain under the radar. From high-profile groups like Evil Corp and Wizard Spider to up and coming groups like AlphV and Blackbyte, the rebranding process has provided viable solution for extending operational capabilities after high profile attacks, including attacks on critical infrastructure. This talk will examine rebranding trends from 2020 until present and provide a thorough review of the impacts ransomware rebranding has had on the operational capacity of multiple ransomware groups. Lastly, this talk will analyze methods that threat intelligence analysts can utilize to compare traits and behaviors between ransomware groups to determine if the group is a likely rebrand or something new altogether.
View upcoming Summits: http://www.sans.org/u/DuS
Download the presentation slides (SANS account required) at https://www.sans.org/u/1iaE