Intelligent CIO Middle East Issue 38 | Page 24

TRENDING their approach, these activities can still deal widespread damage. “Cybercrime is a lucrative industry and it’s not surprising it’s become the arm of powerful, organised groups,” says Don Smith, Senior Director, Cyber Intelligence Cell, Secureworks Counter Threat Unit. “To understand the complete picture of the cybercriminal world, we developed insights based on a combination of Dark Web monitoring and client brand surveillance with automated technical tracking of cybercriminal toolsets.” 24 INTELLIGENTCIO Key findings Among the CTU researchers’ key findings were the following: was likely responsible for a Gandcrab ransomware campaign against the South Korean population and infrastructure, as part of a broader pattern of attacks. The boundary between nation-state and cybercriminal actors continues to blur GandCrab is developed and sold ‘as-a- service’ and is more commonly associated with financially motivated criminal actors. Nation-state actors are increasingly using tools and techniques employed by cybercriminals and vice versa. In August 2018, CTU researchers determined the Democratic People’s Republic of Korea In March 2018, a threat actor likely associated with the Iranian government used access that had previously been leveraged for espionage to deploy a cryptocurrency miner across the www.intelligentcio.com