The video discusses the increasing threat of ransomware cybercrime, which involves hackers stealing data and demanding a ransom to restore access. The financial impact of these crimes is significant, with companies worldwide losing billions of dollars. The hackers are highly organized and their operations can be compared to a burglary, with a series of steps involving 'initial access brokers', 'ransomware affiliates', 'ransomware developers', 'data managers', 'special negotiators', 'chasers', and 'money launderers'. The process starts with hackers gaining initial access to a company's network, which they often purchase. They then use ransomware to lock down the company's systems and demand a ransom. The negotiators try to convince the company to pay the ransom, while the chasers increase the pressure if the company does not comply. If the company does not cooperate, the data is often published online, causing further damage. The money launderers then convert the ransom money into a form that can be used to purchase goods. The video concludes by warning of the potential for these crimes to escalate and the potential consequences for victims, including hospitals that have suffered ransomware attacks.
1. Ransomware is a form of cybercrime where hackers lock down company systems and demand a ransom to restore access.
2. This form of cybercrime costs thousands of billions worldwide.
3. Criminals can hit hundreds of companies with one hack, demanding payment in bitcoins.
4. The ransomware kill chain is a professional and organized criminal operation that involves seven criminal groups.
5. The 'initial access brokers' provide the initial access to the company's computer network. [Source 2](https://www.stackoverflow.com)
6. The 'ransomware affiliates' are responsible for the core of the hacking attack, diving into the company's laptop or hacking the entire company. [Source 2](https://www.stackoverflow.com)
7. The 'ransomware developers' create the ransomware program that takes all a company's files hostage. [Source 2](https://www.stackoverflow.com)
8. The affiliate gets between 70 and 80 percent of the ransom paid, while the developer gets between 20 and 30 percent. [Source 2](https://www.stackoverflow.com)
9. The 'data managers' structure the data that the hackers have captured and prepare it to put online if necessary. [Source 2](https://www.stackoverflow.com)
10. The 'Chasers' increase the pressure on the company if they do not cooperate by negotiating the ransom. [Source 2](https://www.stackoverflow.com)
11. The 'financial experts' or 'money launderers' convert the bitcoins into money that can be paid with. [Source 2](https://www.stackoverflow.com)
12. The ransomware kill chain is now complete, from the initial access brokers to the money launderers. [Source 2](https://www.stackoverflow.com)
13. There are examples of hospitals that have suffered ransomware attacks, with potential life-threatening consequences. [Source 2](https://www.stackoverflow.com)
14. If this continues, it may cost lives. [Source 2](https://www.stackoverflow.com)