Event Hack Red Con 2024 starts on Oct 25, 2024, 10:00:00 AM (America/Kentucky/Louisville)
Ransomware Orientation: How to Infect and Extort Companies
60min Talk - Technical
Location: Track 1 - 10/26/24, 10:00 AM - 10/26/24, 11:00 AM (America/Kentucky/Louisville) (1 hour)
Ransomware Orientation: How to Infect and Extort Companies
Andrew Lemon
Principal Security Engineer
Andrew Lemon
Principal Security Engineer

Lemon is the Principal Security Engineer at Red Threat where he serves as the lead over Incident Response, Penetration Testing and Red Teaming. His primary interests are physical penetration testing and social engineering. Lemon has spent the last 5 years responding to major ransomware events and emulating ransomware groups on Red Team engagements.


Ransomware has moved out of the basement and has become an organized business with payout structures and hierarchy. The purpose of this presentation is a satirical performance of what I expect an affiliates first day with a ransomware company looks like, based on my experience in incident response and my interactions with threat actors using sock puppet accounts. In this presentation you'll learn start to finish the Tools, Techniques, Procedures, and methodologies used by ransomware groups to get in and get paid.