December 13, 2023 at 06:03AM
Ransomware groups are shifting towards a more open and corporate approach, engaging with the media and using public pressure tactics. They communicate through channels like Telegram, and news coverage increases pressure on victims. Some groups engage with the media professionally, while others take a hostile stance. This strategy aims to pressure victims into paying ransom.
Based on the meeting notes provided, it is clear that ransomware groups are adopting a more open and quasi-corporate strategy with the media to increase pressure for victims to pay them. They are engaging with journalists, offering channels for direct communication, and utilizing news coverage to add pressure on their victims. Some groups are even handling conflicts with a degree of professionalism, engaging with the outside world on more hostile terms, and even publishing detailed technical explanations in response to reports. This shift in tactics demonstrates a deliberate attempt to influence the information sphere as well as the technical sphere, as mentioned by Christopher Budd, director of threat intelligence for Sophos X-Ops.