RaaS is business, and it’s big business: total ransomware revenues in 2020 were around $20 billion, up from $11.5 billion the previous year. They have videos, white papers, and are active on Twitter. In addition to RaaS portals, RaaS operators run marketing campaigns and have websites that look exactly like your own company’s campaigns and websites. Subscribers may have access to support, communities, documentation, feature updates, and other benefits identical to those received by subscribers to legitimate SaaS products.
An affiliate can simply log into the RaaS portal, create an account, pay with Bitcoin, enters detailson the type of malware they wish to create and click the submit button. The most sophisticated RaaS operators offer portals that let their subscribers see the status of infections, total payments, total files encrypted and other information about their targets. One-time license fee with no profit sharing Affiliate programs, which are the same as a monthly fee model but with a percent of the profits (typically 20-30%) going to the ransomware developerģ. “Assists” affiliates with victim negotiationsĬommunicates with the victim via chat portals orĢ. Maximizes the infection using “living off the land” Gives affiliates access to a “build your ownĬreates a dedicated “Command and Control”ĭashboard for the affiliate to track the package The table below outlines the roles operators and affiliates play in the RaaS model: RaaS OperatorsĪgrees on a service fee per collected ransom A threat actor doesn’t need every attack to be successful in order to become rich. The price of RaaS kits ranges from $40 per month to several thousand dollars – trivial amounts, considering that the average ransom demand in 2021 was $6 million. They are easy to find on the dark web, where they are advertised in the same way that goods are advertised on the legitimate web.Ī RaaS kit may include 24/7 support, bundled offers, user reviews, forums and other features identical to those offered by legitimate SaaS providers. RaaS kits allow affiliates lacking the skill or time to develop their own ransomware variant to be up and running quickly and affordably. Think of ransomware as a service as a variation of software as a service (SaaS) business model. Ransomware as a Service (RaaS) is a business model between ransomware operators and affiliates in which affiliates pay to launch ransomware attacks developed by operators.
0 kommentar(er)
