CFOs and business leaders need to be aware that ransomware had become the most widespread malware-as-a-Service between 2015 and 2022.
According to a study by Kaspersky, 58% of malware-as-a-service were ransomware in the said period.
The study is based on research conducted on 97 malware families distributed on the dark web and other resources, the firm noted, adding that the researchers found that cybercriminals often lease infostealers, botnets, loaders, and backdoors to carry out their attacks.
Malware-as-a-service is an illicit model of business involving the leasing of software to carry out cyberattacks, according to Kaspersky.
Typically, clients of such services are offered a personal account through which they can control the attack, as well as technical support, the firm said, adding that it lowers the initial threshold of expertise needed by would-be cybercriminals.
Study highlights
- The popularity of ransomware can be attributed to its ability to generate higher profits in a shorter space of time than other types of malware.
- Cybercriminals can "subscribe" to Ransomware-as-a-service for free.
- Once they become partners in the program, they pay for the service after the attack happens.
- The payment amount is determined by a percentage of the ransom paid by the victim, typically ranging from 10% to 40% of each transaction.
- However, entering the program is no simple task, as it entails meeting rigorous requirements.
- Infostealers accounted for 24% of malware families distributed as a service over the analysed period.
- These are malicious programs designed to steal data such as credentials, passwords, banking cards and accounts, browser history, crypto wallets data, and more.
- Infostealer services are paid through a subscription model.
- They are priced between 100 and 300 US dollars per month.
- For example, Raccoon Stealer, which was discontinued in early February 2023, could be acquired for 275 US dollars per month or 150 US dollars per week.
- Its competitor, RedLine, has monthly price of 150 US dollars, and there is also an option to purchase a lifetime license for 900 US dollars, according to the information posted on the Darknet by its operators. Attackers also make use of additional services for extra pay.
- 18% of malware families being sold as a service proved to be botnets, loaders, and backdoors.
- These threats are combined into one group since they often have a common goal: to upload and run other malware on the victim’s device.
