Hackers, Heists, and Heroes: The Evolving Ransomware Game

DISCARDED: Tales From the Threat Research Trenches

Hello to all our Cyber Pals! Join host Selena Larson and guest, ransomware expert, Allan Liska, CSIRT at Recorded Future, drops by to share his creative take on cyber-themed graphic novels, proving there’s nothing ransomware can’t inspire—even superheroes.
In this episode, we uncover the shadowy ecosystem driving ransomware attacks, from the industrialization of cybercrime to the rise of "small-batch" threat actors redefining chaos. Explore how Operation Endgame dealt a devastating blow to malware powerhouses like Pikabot and SmokeLoader, shaking trust within underground networks and leaving cybercriminals scrambling to regroup.
We’ll also decode the evolving tactics of ransomware gangs, from slick AI-powered voice disguises to the surprising shift toward consumer scams. Plus, we’ll discuss whether law enforcement’s crackdown will make ransomware too expensive for crooks, forcing them to rethink their game plans—or at least settle for less glamorous schemes like crypto theft.
Don’t miss the Champagne pick that pairs perfectly with ransomware disruptions! 🥂
Resources mentioned:
https://www.chainalysis.com/blog/2024-crypto-crime-mid-year-update-part-1/
https://www.marketplace.org/shows/marketplace-tech/how-scammers-hijack-their-victims-brains/
https://www.cisa.gov/resources-tools/resources/review-attacks-associated-lapsus-and-related-threat-groups-report
https://www.proofpoint.com/us/blog/threat-insight/major-botnets-disrupted-global-law-enforcement-takedown
https://www.justice.gov/opa/pr/us-charges-russian-national-developing-and-operating-lockbit-ransomware
https://therecord.media/russian-national-in-custody-extradited
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-241a
https://unit42.paloaltonetworks.com/north-korean-threat-group-play-ransomware/
https://therecord.media/chamelgang-china-apt-ransomware-distraction
https://urldefense.com/v3/__https://www.recordedfuture.com/research/outmaneuvering-rhysida-advanced-threat-intelligence-shields-critical-infrastructure-ransomware__;!!ORgEfCBsr282Fw!pYnNQZUQJLJTFlj5w7PcWRjyr6rh-logFnqo03_Mz19RUrK4rftQU1qbTj_iql3KNjn4Ub7a5LsDLpCJgdJQSA$
For more information about Proofpoint, check out our website.
Subscribe & Follow:
Don't miss out on future episodes—subscribe to the Discarded Podcast on your favorite platform.