Decrypting Cyber Threats: Tactics, Takedowns, and Resilience

DISCARDED: Tales From the Threat Research Trenches

Hello to all our cyber pals! Joining our series host, Selena Larson, is our co-host today, Tim Kromphardt. Together they welcome our special guest–Daniel Blackford, the Director of Threat Research at Proofpoint. The conversation dives into the intricate world of cyber threats and the impact of law enforcement disruptions on malware, botnets, and ransomware actors.
We'll explore how threat actors react when their preferred infrastructures or ransomware-as-a-service systems get taken down, offering insights into their various responses—from rebuilding and rebranding to the emergence of new power players in the cybercriminal ecosystem.
We also talk about:

• Analysis of the Hive ransomware takedown and the massive Qbot operation, including the technical and human aspects of these disruptions
• How other groups rise to prominence despite disruptions
• Differences between malware disruptions and business email compromise (BEC) or fraud-focused disruptions
• The evolution of threat actor techniques, such as, legitimate remote management tools and living off the land techniques

For more information about Proofpoint, check out our website.
Subscribe & Follow:
Don't miss out on future episodes—subscribe to the Discarded Podcast on your favorite platform.