Insider threats to ransomware groups

What happens when cyber criminals don’t get what they believe they're owed?

For this episode, Robby is joined by John Fokker, Head of Trellix Threat Intelligence. John shares from his long experience fighting cybercrime, where he among other places has worked for the Dutch National High-Tech Crime Unit (NHTCU), the Dutch National Police unit dedicated to investigate advanced forms of cybercrime. John was also one of the co-founders of the NoMoreRansom Project.

They discuss John’s encounter with an insider in a ransomware group, the valuable information these situations provide the security community, and what we have learned from them.

John also talks about how cybercrime has changed during his career, and how the war in the Ukraine has affected organised cybercrime.