Alex Bovicelli explains that the current SMB ransomware wave is being fueled by Initial Access Brokers and requires a shift from reactive defenses to targeted intelligence. He highlights how Tokio Marine HCC leverages incident visibility to track infostealer logs and surface compromised credentials before they can be weaponized. #TokioMarineHCC #Infostealers
Keypoints
- Alex Bovicelli breaks down the mechanics behind the SMB ransomware surge.
- Tokio Marine HCC is moving beyond reactive defenses by using broad incident visibility.
- Security teams are focusing on the operations of Initial Access Brokers.
- Infostealers have become the primary engine that powers those brokers.
- Tracking infostealer logs helps identify compromised credentials before attackers weaponize them.