Ransomware groups continue to adapt their tactics, techqnique and procedures (TTPs) and evolve their social engineering strategies to try to squeeze victims to pay up. These guys are constantly testing new methods. The newest twist is forming “cartels”. Recently cyber intelligence firm KeLa reported Maze operators added the information and files to their public shaming web site of another enterprise-targeting ransomware operation [known as LockBit.
Is this a sign they are optimizing their profits are having trouble. Either way, Ransomware 2.0 is turning more and more into “Leakware” which means you’ve been breached and need to report as a data breach. More reason to phish your users regularly.