Same Threats, Different Ransomware

As ransomware-as-a-service (#RaaS) – a cybercrime business model where individuals or groups lease or purchase ready-made ransomware — Sophos X-Ops finds there are now dozens of affiliate groups that use the same ransomware families. In this blog, we detail a clustering case in which a ransomware affiliate group switches between #ransomware variants, but continues to leverage the same core TTPs.

Organizations can turn on multi-factor authentication (#MFA) for VPN access and enable application control policies to minimize risks posed by these groups. Learn more about this: