Ransomware-as-a-Service (RaaS): Understanding the Criminal Business Model

RaaS enables non-technical criminals to deploy ransomware.

Business Model

- Developers create ransomware
- Affiliates distribute attacks
- Revenue sharing (70-80% to affiliate)
- Support and updates provided

Notable RaaS Groups (2023-2024)

- LockBit 3.0
- BlackCat/ALPHV
- Royal
- Play
- Cl0p

Defense Strategies

- Immutable backups
- Network segmentation
- EDR solutions
- Email security gateways
- Zero trust architecture