Skip to main content

Ransomware as a service (RaaS)


Ransomware as a service (RaaS) is a low-code software delivery model for malicious software. In this delivery model, programmers who develop software for carrying out ransomware attacks make the software available, sometimes for purchase, on the dark net. 

RaaS provides criminals with a minimal learning curve for carrying out extortion attacks. The software is designed to be user-friendly and typically provides the user with a graphical user interface (GUI) that looks very much like traditional e-commerce dashboards. An RaaS dashboard will typically feature drag-and-drop modules to help the criminal customize payloads, as well as metrics for monitoring infections and the current price of bitcoin.

The software as a service (SaaS) delivery model has proved to be beneficial to the criminal because it allows them to lower their own risk profile. With RaaS, they now have a choice to either become a silent partner in an extortion attempt or remove themselves entirely and simply monetize their programming skills.

The recent uptick in the number of ransomware infections has been attributed by many security experts to the advent of RaaS and affiliate networks of RaaS customers. To prevent yourself from becoming a victim of an RaaS attack, security experts recommend the following:
  • Backup all data on a regular basis to minimize the attack surface.
  • Apply software updates as soon as they become available.
  • Maintain a "security first" mentality.
  • Consider investing in cybersecurity insurance.


Comments

Popular posts from this blog

A Graphics Processing Unit (GPU)

A graphics processing unit (GPU) is a computer chip that performs rapid mathematical calculations, primarily for the purpose of rendering images. A GPU may be found integrated with a central processing unit (CPU) on the same circuit, on a graphics card or in the motherboard of a personal computer or server. In the early days of computing, the CPU performed these calculations. As more graphics-intensive applications such as AutoCAD were developed; however, their demands put strain on the CPU and degraded performance. GPUs came about as a way to offload those tasks from CPUs, freeing up their processing power. NVIDIA, AMD, Intel and ARM are some of the major players in the GPU market. GPU vs. CPU A graphics processing unit is able to render images more quickly than a central processing unit because of its parallel processing architecture, which allows it to perform multiple calculations at the same time. A single CPU does not have this capability, although multi...

What's the difference between two-step verification and 2FA?

  The two terms, two-step verification, and two-factor authentication are synonymous, though the former is now being used more widely by the likes of Google, Microsoft, and Apple as it better conveys how the actual authentication process works. In the past, two-step verification was used to describe processes that used the same authentication factors, while two-factor authentication described processes that involved different factors, such as entering a password on a website and receiving a numerical code on a mobile device. Today, the two terms are both used to describe authentication that involves a secondary factor that is different from the first. Authentication is a vital element of access control and data security because users can be assigned access rights and be authorized to perform certain actions only after successful authentication is performed. The ways in which someone can be authenticated fall into three categories based on what is known ...

Black Swan Event

A black swan event is an incident that occurs randomly and unexpectedly and has wide-spread ramifications. The event is usually followed with reflection and a flawed rationalization that it was inevitable. The phrase illustrates the frailty of inductive reasoning and the danger of making sweeping generalizations from limited observations. The term came from the idea that if a man saw a thousand swans and they were all white, he might logically conclude that all swans are white. The flaw in his logic is that even when the premises are true, the conclusion can still be false. In other words, just because the man has never seen a black swan, it does not mean they do not exist. As Dutch explorers discovered in 1697, black swans are simply outliers -- rare birds, unknown to Europeans until Willem de Vlamingh and his crew visited Australia. Statistician Nassim Nicholas Taleb uses the phrase black swan as a metaphor for how humans deal with unpredictable events in his 2007...