Category Archives: Incident Response

Negotiating With Threat Actors to Defeat Ransomware

CyBiz’s partner, Sygnia has a ransomware negotiator on their team, which is a key weapon they use when responding to sophisticated ransomware attacks. Having an in-house negotiator enables a more seamless response to cybersecurity incidents.

In today’s digital age, the proliferation of ransomware attacks has become synonymous with the rise of cryptocurrency, enabling threat actors to leverage the anonymity and ease of transaction through cryptocurrencies. Today’s ransomware groups are increasingly sophisticated and are modelled on big business with franchises, resellers, customer service, collaboration tools, training, HR departments and performance reviews.

Continue reading

What is a Threat Actor in Cyber Security?

In cyber security, a threat actor refers to an individual, group, or entity that has the capability and the intent to carry out malicious activities against digital assets, information systems, or networks.

Threat actors vary widely in terms of their motivations, resources, and techniques and can include hackers, cyber-criminal organisations, nation-states state-sponsored entities, hacktivists, insiders, disgruntled employees, or even a competing organisation.

Although the threat landscape is dynamic, and new threat actors and TTPs continually emerge, we have observed some very specific trends in threat actors over the past few years.

Continue reading