Tracing the ransomware family tree

Ransomware is behind many of the latest cyber attacks and it can be hard for defenders to track the ever-growing number of variants and the botnets behind them. Threat intelligence company DomainTools has been taking a look at the booming underground economy surrounding ransomware with a focus on the most prolific ransomware families. The top three ransomware families by number of victims are: Conti, Maze (Egregor), and Sodinokibi (Revil). All of these groups make alliances, share tools, and sell access to one another and nothing remains static. There are also sophisticated affiliate programs, where ransomware authors design a piece of… [Continue Reading]