Ransomware Rodeo: Law Enforcement Spurs New Scamming Schemes!
Secureworks’ Counter Threat Unit reveals that law enforcement pressure has forced ransomware groups to innovate beyond the LockBit model, introducing schemes like DragonForce’s distributed model and Anubis’ multiple offerings. DragonForce enables affiliates to create their own brands, while Anubis offers unique extortion tactics, including reporting victims to authorities as part of their strategy.

Hot Take:
Ransomware gangs are switching models like they’re in a fashion show, strutting their new distributed designs and extortion accessories down the cyber runway. While law enforcement plays catch-up, these gangs are proving that crime is not only profitable but also adaptable. Who knew ransomware could be so on-trend?
Key Points:
- Law enforcement actions are pushing ransomware groups to innovate beyond traditional affiliate models.
- DragonForce has rebranded its ransomware-as-a-service (RaaS) scheme as a “cartel” with a distributed model.
- Anubis offers three different extortion models: RaaS, Data Ransom, and Accesses Monetization.
- Anubis uses public shaming and threats of legal notification as part of its extortion strategy.
- Secureworks CTU recommends enhancing security measures like patching, MFA, and monitoring.
Already a member? Log in here