Hands-on Ransomware: Exploring Cybercrime
Source: YouTube · John Hammond · published Jun 5, 2023 · 43:29
This video demonstrates how ransomware builders have commoditized cybercrime, making it accessible to non-technical actors through simple GUI interfaces 0:00-0:12. The presenter shows various ransomware builders including open-source tools and leaked versions from major groups like LockBit, highlighting how easily customized ransomware can be generated 22:00-23:05.
Key Takeaways:
• Ransomware builders provide GUI interfaces that allow affiliates to easily customize encryption settings, ransom notes, and target directories without technical expertise 4:30-6:40
• Modern ransomware groups operate as "Ransomware-as-a-Service" enterprises, with developers building tools and affiliates carrying out attacks in exchange for a cut 2:50-3:30
• The LockBit builder, leaked in 2022, demonstrates advanced features including process termination, event log deletion, and network spreading capabilities 22:50-32:30
• These builders create both encryptors and decrypters, with some implementing proper public/private key cryptography while others contain critical flaws 14:50-15:35
• The video concludes with a live demonstration of a custom-built ransomware encrypting files in real-time, showing how trivial it is to create functional malware 18:50-19:30
The accessibility of these tools has transformed ransomware into a commoditized criminal enterprise, significantly lowering the barrier to entry for cybercriminals.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
and it actually takes you to their archive their code collection archive and in here the first thing they have is they have a section on builders in this case I've grabbed the yashma ransomware Builder so you can grab it from right here I mean I literally just clicked here and downloaded it right and so you can too by the way I'm sure that you give Daryl disclaimers like this would actually be ever Criminal anyways we have lock bit here the biggest group out right now the biggest and I'll call it again legitimate ransomware group alrighty how's it going everyone hey this is pretty awesome I am stoked to be hanging out with a dear friend of mine uh and we're getting a little bit more time to Banter and uh riff back and forth but Ryan Brian Chapman it's so good to see you dude and uh how are…