Ransomware groups test new business models to hit more victims, increase profits

Summary: Research indicates that operators of DragonForce and Anubis ransomware-as-a-service are evolving their business models to attract more affiliates, akin to strategies used in legitimate businesses. By adopting new collaborative frameworks and monetization methods, they aim to increase their market share, but these developments come with shared risks among affiliates. The ongoing experimentation in the ransomware ecosystem may have significant future implications for cyber threats and defenses.

Affected: Ransomware operators and their potential victims

Keypoints :

• DragonForce has rebranded to a “cartel” model, allowing affiliates to use their own brands while leveraging shared infrastructure.
• Anubis is providing multiple monetization schemes, with affiliates earning a significant percentage of ransoms through various extortion tactics.
• Law enforcement disruptions are reshaping the ransomware landscape but ongoing vulnerabilities and potential for new attacks remain a threat.