Can cyber group takedowns last?
Briefly

International law enforcement has successfully shut down several cyber crime groups through website seizures that serve as powerful PR moves. Despite these actions, hackers frequently continue operations by rebranding or using new infrastructure. Recent reports indicate that ransom payments have surged significantly, prompting organizations to enhance their defenses. The collaboration between enterprises and law enforcement is vital, as seen in instances like the Cobalt Strike case, which involved the seizure of numerous malicious domains and servers, underscoring the ongoing battle against cyber crime.
"What you mentioned around, you know, data being leaked, that's vital intelligence for law enforcement, for threat researchers, and that's the big takeaway from a lot of these takedowns, I guess. In the wake of that, you're seizing domains, you're seizing servers, you're getting really valuable information on how these organizations work."
"The Veeam report said payments rose to an average of $1.1 3 million. And that's a 104% increase compared to the first quarter of this year. You know, the median payment rose two fold to $400,000, so it's high stakes. At the same time, though, we are seeing a stronger approach by enterprises. We had coverage out today as well, mentioning the fact that organizations are just outright refusing to pay and a part of that is down to the fact that they're really implementing more robust backup and recovery."
"With the Cobalt Strike situation, this is a really great example of enterprises teaming up law enforcement also having a critical role to play. The numbers speak for themselves: 200 malicious domains, 600 servers"
Read at IT Pro
[
|
]