When I hear this story of a Ukrainian hacker confessing to being part of the Nefilim ransomware organization. I feel that it is not a movie plot, but really telling me to beware. This is an example of how everyday talents can quickly become dangerous cybercriminals.
So what did he do?
His responsibility was obtaining access. He would hack into the companies system and then handed control over to the Nefilim organization. Have you ever noticed how when tasks are shared by people in criminal organizations, it makes their crime operations much more efficient?
The overall methods can be outlined as follows:
Many individuals still believe that there is no punishment for ransomware crime and this case clearly contradicts that position.
From a tech fan's perspective, it is a lesson that one has the responsibility to use their knowledge and skills in an ethical and responsible manner.
So what did he do?
What Does "Ransomware Associate" Mean?
When we think of a hacker, we usually picture a lone crazy genius typing away in a dark space. But this particular hacker was not the leader of the operation, he was an acquirer affiliate who worked closely with the Nefilim.org ransomware company, which had all the tools to create ransomware.His responsibility was obtaining access. He would hack into the companies system and then handed control over to the Nefilim organization. Have you ever noticed how when tasks are shared by people in criminal organizations, it makes their crime operations much more efficient?
Methods Used During Attack
The overall method used to execute the attacks was an uncomplicated, yet repeatable process, which is why it is so frightening.The overall methods can be outlined as follows:
- Access a company network
- Encrypt essential files in order to disable company operations
- Request a ransom
- Threaten to leak the encrypted files unless the ransom is paid
Importance of This Case
As a long-time follower of the cybercrime news, this case is significant to me. Law enforcement was able to track an online hacker from another country, arrest him and bring him to the US.Many individuals still believe that there is no punishment for ransomware crime and this case clearly contradicts that position.
Overall Lesson for Everyone
From a business perspective, this case illustrates that good security practices are essential. If your company has weak passwords and/or has not patched its systems, you are giving your affiliates the opportunity to take advantage of that weakness. Why give them the opportunity?From a tech fan's perspective, it is a lesson that one has the responsibility to use their knowledge and skills in an ethical and responsible manner.