Cybercriminals Recruit Experts for Advanced Ransomware Development

Businesses and cybercriminals alike are seeking skilled cybersecurity professionals, with the latter advertising for talent capable of developing dark AI models and penetration-testing tools, commonly used for ransomware. These efforts aim to strengthen their malware and reduce the risk of detection by defenders.

Telegram chats and forums such as the Russian Anonymous Marketplace (RAMP) are popular platforms for recruiting such talent. According to Cato Networks’ “Q3 SASE Threat Report,” these forums feature advertisements for developers to create malicious versions of tools like ChatGPT, showcasing the growing technical sophistication of cybercriminal operations.

The increasing demand for technical expertise reflects the recent success of law enforcement and private companies in dismantling botnets and aiding victims. “They definitely want to make sure all the effort they’re putting into their software is not going to be turned over when somebody finds a vulnerability,” said Etay Maor, chief security strategist at Cato Networks. Cybercriminals are now mirroring corporate practices to ensure their tools are robust.

As cybercriminal organizations grow, their structures increasingly resemble legitimate businesses, with specialized roles for software development, finance, and operations. Leading groups such as LockBit, RansomHub, and Akira have adopted these practices to improve efficiency and profitability. “These emerging gr

[…]
Content was cut in order to protect the source.Please visit the source for the rest of the article.