Event Details

Abstract:  This work-in-progress study investigates the organizational and social dynamics within a profitable ransomware group. By analyzing extensive chat logs leaked from the group, the study aims to understand the extent to which “organized” cybercrime is truly organized and how the groups structure contributes to its resilience. The research employs qualitative coding of conversations to relationships, roles and operational processes within the group. A social graph is constructed to map the group membership structure and evolution of such relationships over time. The study also empirically tests whether the group exhibits a hierarchical organizational pattern based on workflow, mentorship, and friendship relationships among members. The study aims to provide insights into the complex interplay of actors and their roles within the group’s cybercriminal activities, ultimately informing strategies to target and disrupt similar clandestine groups.

Speaker Bio

Dalya Manatova, currently pursuing her Ph.D. in Security Informatics at Indiana University and honored as an Ostrom Fellow, is exploring the organizational and social dynamics within cybercriminal and outlawed communities, and methods to inform cyber threat intelligence.   ISI Host: James Blythe, Networking & Cybersecurity Division ISI POC: Joe Kemp, Networking & Cybersecurity Division