Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • apa.csl
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
Understanding Corporate Ransomware – A Case Study in the Nordics
Karlstad University, Faculty of Health, Science and Technology (starting 2013), Department of Mathematics and Computer Science (from 2013). Swedish Defence University, Sweden.ORCID iD: 0009-0008-2442-4058
Karlstad University, Faculty of Health, Science and Technology (starting 2013), Department of Mathematics and Computer Science (from 2013).
2025 (English)In: Cybersecurity: Proceedings of the 9th European Interdisciplinary Cybersecurity Conference / [ed] Isabel Praça, Simona Bernardi, Pedro R.M. Inácio, Springer, 2025, Vol. 2500 CCIS, p. 82-97Conference paper, Published paper (Refereed)
Abstract [en]

Ransomware is continuously evolving and has recently seen record-breaking payouts. This paper describes developments in corporate ransomware which have contributed to this continued rise. It provides an interdisciplinary case study of a ransomware campaign conducted in northern Europe during 2023 and 2024. We argue that underlying factors, including the broad rollout of personal cloud backups, have caused modern ransomware groups to shift towards expending more effort per attack in order to attack bigger targets. We perform an analysis of such an attack using a combination of internal and open sources, as well as using forensic techniques. The analysis shows how the attackers approach high-value targets, use both traditional crypto-ransomware tools and hacking, and utilize multiple avenues of extortion to negotiate the highest possible ransom. 

Place, publisher, year, edition, pages
Springer, 2025. Vol. 2500 CCIS, p. 82-97
Series
Communications in Computer and Information Science ; CCIS, volume 2500
Keywords [en]
Personal computing, Akira, Breakings, Case-studies, Corporates, Double extortion, Internal source, Malwares, Open-source, Personal clouds, Underlying factors, Malware
National Category
Computer Sciences
Research subject
Computer Science; Computer Science
Identifiers
URN: urn:nbn:se:kau:diva-106249DOI: 10.1007/978-3-031-94855-8_6ISI: 001552002800006Scopus ID: 2-s2.0-105009287108ISBN: 978-3-031-94854-1 (print)ISBN: 978-3-031-94855-8 (electronic)OAI: oai:DiVA.org:kau-106249DiVA, id: diva2:1982432
Conference
9th European Interdisciplinary Cybersecurity Conference, EICC, Rennes, France, June 18–19, 2025.
Funder
Knowledge FoundationAvailable from: 2025-07-08 Created: 2025-07-08 Last updated: 2026-02-12Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Larsson, EmilJensen, Meiko

Search in DiVA

By author/editor
Larsson, EmilJensen, Meiko
By organisation
Department of Mathematics and Computer Science (from 2013)
Computer Sciences

Search outside of DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetric score

doi
isbn
urn-nbn
Total: 116 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • apa.csl
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf