Sign Up for Our Newsletter
Donate

Analysis

Explore our research

Search
Filters

Mapping the Ransomware Payment Ecosystem: A Comprehensive Visualization of the Process and Participants

Report

Mapping the Ransomware Payment Ecosystem: A Comprehensive Visualization of the Process and Participants

Central to our ability to mitigate the threat of ransomware is the development of a common understanding of the actors, stakeholders, processes, and information, both required for and produced during the ransomware payment process. Yet, when we began this work, such a picture did not exist. We undertook this effort to fill that gap.
mapping, ransom payments, Ransomware, visualization
November 15, 2022
Plan maestro de defensa contra los programas de secuestro

Report

Plan maestro de defensa contra los programas de secuestro

En respuesta a la acción 3.1.1 del Informe del Grupo de Trabajo sobre Programas de Secuestro, en la cual se exhorta a las organizaciones de ciberseguridad a establecer un marco claro y accionable para la mitigación, la respuesta y la recuperación ante programas de secuestro, el Grupo de Trabajo encargado de elaborar un plan de defensa contra los programas de secuestro formuló un plan maestro que abarca un subconjunto de salvaguardias esenciales de ciberhigiene seleccionadas de los controles críticos de seguridad del Centro para la Seguridad de Internet (CIS Controls®) v8.
Blueprint for Ransomware Defense, cyber attacks, defense, Future of Digital Security, Ransomware, RTF
November 10, 2022
Democracy Gone Digital: The Election Season Online

In the News, Op-ed

Democracy Gone Digital: The Election Season Online

In an op-ed for Tech Policy Press, Zoë Brammer and Philip Reiner sound the alarm based on our Digital Cognition and Democracy Initiative (DCDI) research. We need to help voters grapple with information overload and unnaturally immersive experience provoked by digital tools, they urge.
DCDI, democracy, digital cognition, election manipulation
November 7, 2022
Cyber Incident Reporting Framework

Report

Cyber Incident Reporting Framework

The Framework lays out a set of model reporting formats the Cybersecurity and Infrastructure Security Agency (CISA) could use as the foundation for the cyber incident reporting.
CIRCIA, cyber, cybersecurity, incident reporting, Ransomware
November 3, 2022
Cyber incident reporting isn’t the problem — ignorance is

Op-ed

Cyber incident reporting isn’t the problem — ignorance is

In an op-ed for The Hill, IST's Chief Strategy Officer Megan Stifel and Cyber Threat Alliance's President & CEO Michael Daniel make the case for reporting cyber incidents.
CIRCIA, CISA, incident reporting, Ransomware
November 2, 2022
A Lifecycle Approach to AI Risk Reduction: Tackling the Risk of Malicious Use Amid Implications of Openness

Report

A Lifecycle Approach to AI Risk Reduction: Tackling the Risk of Malicious Use Amid Implications of Openness

A Lifecycle Approach to AI Risk Reduction introduces a novel framework for addressing the complex risks associated with AI, and applies this framework to the risk of malicious use.
Testimony: Red Alert: Countering the Cyberthreat from China

Testimony

Testimony: Red Alert: Countering the Cyberthreat from China

On May 15, 2024, Chief Trust Officer Steve Kelly testified before the House Committee on Oversight and Accountability Subcommittee on Cybersecurity, Information Technology, and Government Innovation in a hearing entitled, "Red Alert: Countering the Cyberthreat from China."
Ransomware Task Force: Doubling Down

Progress Report, Report

Ransomware Task Force: Doubling Down

While the U.S. government and its partners made great strides in combating ransomware in 2023, attacks have only increased. Of the 48 recommendations made in the original RTF Report, our assessment remains unchanged from a year ago: only 24 have seen significant progress.
Information Sharing in the Ransomware Payment Ecosystem: Exploring the Delta Between Best Practices and Existing Mechanisms

Report

Information Sharing in the Ransomware Payment Ecosystem: Exploring the Delta Between Best Practices and Existing Mechanisms

IST's latest report pulls from a recent attack scenario exercise performed by the Ransomware Task Force's Payments Working Group, comparing the results to information sharing case studies including the Hive disruption operation, the Emotet botnet takedown, and the Colonial Pipeline ransom recovery.

CATALINK