Here’s a summary of the provided content:
Ransomware Negotiation Tactics
In a video by Help Net Security, Dave Ross from Intel 471 discusses the intricacies of ransomware negotiations. Key points include:
- Attack Strategies: Ross explains how ransomware groups prepare for attacks by researching a victim’s revenue and insurance coverage.
- Negotiation Demands: Typically, ransom demands are set between 1% to 5% of the victim’s annual revenue, with negotiation deadlines shifting based on victim responses.
- Organizational Structure: Ransomware operations often involve a division of labor, with teams dedicated to research, negotiation, and public pressure tactics.
- Criminal Economy: He points out an ecosystem supporting these attacks, offering skills in languages, data analysis, and legal advice.
- Multi-Extortion Tactics: Methods include data theft, DDoS attacks, and outreach to customers and media.
- Preparation Before Incidents: Important steps include designating authorized spokespeople and identifying key stakeholders.
For further reading, a download of the 2026 Credential Risk Report is available here.
Feel free to ask if you need more details or specific information!
