Ransomware-as-a-service groups are finding innovative new ways of working together. Affiliates have become so skilled that they’re chafing against a very hierarchical business model, thus giving rise to new approaches and players. Experts warn that it’s easy for operations to rebrand, or hand their code off to someone else. Less advanced groups also brought in specialists, in part for big game hunting, meaning taking down larger targets in pursuit of larger ransoms. In May, some attackers perhaps overreached: Conti hit Ireland’s health service, DarkSide crypto-locked U.S.-based Colonial Pipeline and REvil attacked meat processing giant JBS.”]
Source: https://www.bankinfosecurity.com/groove-promises-maximum-profits-for-ransomware-affiliates-a-17496