CONFidence 2022: From BlackMatter to BlackCat: Analyzing 2 attacks from 1 affiliate - Tiago Pereira

BlackCat is simply a growing, ransomware-as-a-service (RaaS) group that is said to be connected to the BlackMatter/DarkSide ransomware groups, infamous for attacking the Colonial Pipeline last year. In this presentation we will focus on the techniques and tools utilized by what we believe is an affiliate of both BlackCat and BlackMatter and describe how a BlackCat attack was carried out and how we can connect it to a erstwhile BlackMatter attack. knowing and keeping up with the techniques and tools utilized by RaaS affiliates is key in protecting from ransomware attacks, as these take place (frequently respective days) before the actual ransomware is executed.

Website: https://confidence-conference.org
Facebook: https://www.facebook.com/confidence.conference
Twitter: https://twitter.com/confidenceconf