• Search for:
    12 Jan, 2022
    Who is the Network Access Broker ‘Wazawaka?’
    Cybersecurity , , , , , , , , , , , , , , , , , , , , ,

    In a great many ransomware attacks, the criminals who pillage the victim’s network are not the same crooks who gained the initial access to the victim organization. More commonly, the infected PC or stolen VPN credentials the gang used to break in were purchased from a cybercriminal middleman known as an initial access broker. This post examines some of the clues left behind by Wazawaka, the handle chosen by a major access broker in the Russian-speaking cybercrime scene. …

    Read MoreWho is the Network Access Broker ‘Wazawaka?’

    3 Dec, 2021
    Who Is the Network Access Broker ‘Babam’?
    Cybersecurity , , , , , , , , , ,

    Rarely do cybercriminal gangs that deploy ransomware gain the initial access to the target themselves. More commonly, that access is purchased from a cybercriminal broker who specializes in stealing remote access credentials — such as usernames and passwords needed to remotely connect to the target’s network. In this post we’ll look at the clues left behind by “Babam,” the handle chosen by a cybercriminal who has sold such access to ransomware groups on many occasions over the past few years. …

    Read MoreWho Is the Network Access Broker ‘Babam’?