CyberWire Daily
No rest for the patched.
Feb 20, 2025
Stephen Hilt, a senior threat researcher at Trend Micro with expertise in the cyber underground market, shares valuable insights. He discusses the alarming rise of Ghost ransomware impacting over 70 countries. Hilt delves into the evolution of cybercrime dynamics, highlighting the shift toward 'access as a service' and the integration of AI technologies for criminal strategies. He also sheds light on the merging of English and Russian cyber forums and the challenges law enforcement faces in this interconnected landscape.
33:54
Episode guests
AI Summary
AI Chapters
Episode notes
Podcast summary created with Snipd AI
Quick takeaways
- Ghost ransomware is a significant threat affecting organizations worldwide, exploiting software vulnerabilities and highlighting the need for improved defensive strategies.
- The cyber underground market is evolving towards 'access as a service,' indicating a globalization of cybercrime with sophisticated, AI-assisted tactics.
Deep dives
Ghost Ransomware Threats
Ghost ransomware poses a significant risk, having breached organizations in over 70 countries across various sectors including critical infrastructure and healthcare. Active since 2021, it exploits vulnerabilities in widely used software, such as Fortinet and Exchange, making it challenging to attribute attacks due to frequent changes in malware and communication methods. Defensive strategies recommended include regular backups, prompt software patching, network segmentation, and the implementation of multi-factor authentication to reduce susceptibility to attacks. CISA and the FBI have issued advisories highlighting indicators of compromise and effective tactics for defending against these sophisticated cyber threats.
Remember Everything You Learn from Podcasts
Save insights instantly, chat with episodes, and build lasting knowledge - all powered by AI.
