lazarusholic

Everyday is lazarus.dayβ

Localization of Ransomware, New Change or Temporary Phenomenon?

2023-01-26, Ahnlab
https://jsac.jpcert.or.jp/archive/2023/pdf/JSAC2023_2_3_jacky_en.pdf
JSAC2023_2_3_jacky_en.pdf, 1.2 MB
#Ransomware #Gwisin

Contents

Localization of Ransomware,
New Change or Temporary
Phenomenon?
- Characteristics and Techniques of Active Ransomware Gangs in
Korea
CHA Minseok (Jacky Cha, 車珉錫)
Senior Principal Threat Intelligence Researcher
Threat Intelligence Team | ASEC
JSAC 2023 (January 26, 2023)


:~$whoami
• CHA Minseok(Jacky Cha, 車珉錫)
- Senior Principal Threat Intelligence Researcher at AhnLab
- Joined AhnLab in 1997 (25+ years of experience in Anti-Virus technologies)
- ICT Cyber Expert Group in Korea, Former AVAR (Association of Anti-Virus Asia Researchers) Director, Former WildList Reporter
- Speaker at AVAR, AVTOKYO, CARO Workshop, CODE BLUE, HITB GSEC Commsec, JSAC, SECUINSIDE and Virus Bulletin
- Enjoys old video games (Apple ][, Atari 8 bit, Commodore 64, MSX, MS-DOS) and old Anime

2


Table of Contents
1 Recent Ransomware Trends
2 Localization of Ransomware?
3 Case Study: Republic of Korea
4 Characteristics of Targeted Ransomware (in Korea)

5 Outlook of Ransomware Localization
6 Conclusion


1
Recent Ransomware Trends


Ransomware
• Ransomware

- Greatest concern for customers
- RaaS (Ransomware as a Service)

- Targeted attack
- Recovery Tool: Securing ransomware bug and key

* …