Ransomware as a Service is a
cybercrime business model where ransomware operators write software and affiliates pay to launch attacks using said software.
Affiliates do not need to have technical skills of their own but rely on the technical skills of the operators.
Threat Intelligence Centre(MSTIC) regards RaaS as different from previous forms of ransomware as it no longer has a tight link between tools, initial entry vector and payload choices.
They regard them as having a double threat - both encrypting data and exfiltrating it and threatening to publish it.
[
Examples of RaaS kits include ]Locky
Locky is ransomware malware released in 2016. It is delivered by email (that is allegedly an invoice requiring payment) with an attached Microsoft Word document that contains malicious macros. When the user opens the document, it appears to be ...
, Goliath, Shark, Stampado, Jokeroo and Encryptor.[
]
References
{{reflist
Ransomware
Cybercrime