Threat Intelligence

Ransomware gangs increasingly cozy up to media

More ransomware gangs have been establishing a relationship with the media in a bid to strengthen their data extortion efforts, with the practice already being adopted by the RansomHouse, Play, and Royal ransomware operations, according to Dark Reading. By establishing direct communication with journalists through Telegram channels and "Contact Us" forms, as well as supplementary information, ransomware groups could easily broadcast their exploits and further pressure not only its victims, but also their customers and suppliers, to fulfill their demands, a report from Sophos X-Ops revealed. Media coverage of ransomware operations have also helped establish credibility for the attackers, noted the report. "This shows that they're true hackers. Now they're trying to hack the information sphere, as well as the technical sphere," said Sophos X-Ops Director of Threat Intelligence Christopher Budd, who added that other ransomware gangs, including ALPHV/BlackCat and Cl0p, have been more hostile in their dealings with the media, with the former reported to be rectifying incorrect details regarding its attack against MGM Resorts.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.