The Ransomware War
Easy Prey19 Marras 2025

The Ransomware War

Ransomware isn't a lone hacker in a hoodie. It's an entire criminal industry complete with developers, brokers, and money launderers working together like a dark tech startup. And while these groups constantly evolve, so do the tools and partnerships aimed at stopping them before they strike.

My guest today is Cynthia Kaiser, former Deputy Assistant Director of the FBI's Cyber Division and now the Head of the Ransomware Research Center at Halcyon. After two decades investigating global cyber threats and briefing top government leaders, she's now focused on prevention and building collaborations across government and industry to disrupt ransomware actors at their source.

We talk about how ransomware groups operate, why paying a ransom rarely solves the problem, and what layered defense really means for organizations and individuals. Cynthia also shares how AI is reshaping both sides of the cyber arms race and why she believes hope, not fear, is the most powerful tool for defenders.

Show Notes:
  • [01:04] Cynthia Kaiser had a 20-year FBI career and has now transitioned from investigation to prevention at Halcyon.
  • [03:58] The true scale of cyber threats is far larger than most people realize, even within the government.
  • [04:19] Nation-state and criminal activity now overlap, making attribution increasingly difficult.
  • [06:45] Cynthia outlines how ransomware spreads through phishing, credential theft, and unpatched systems.
  • [08:08] Ransomware is an ecosystem of specialists including developers, access brokers, money launderers, and infrastructure providers.
  • [09:55] Discussion of how many ransomware groups exist and the estimated cost of attacks worldwide.
  • [11:37] Ransom payments dropped in 2023, but total business recovery costs remain enormous.
  • [12:24] Paying a ransom can mark a company as an easy target and doesn't guarantee full decryption.
  • [13:11] Example of a decryptor that failed completely and how Halcyon helped a victim recover.
  • [14:35] The so-called "criminal code of ethics" among ransomware gangs has largely disappeared.
  • [16:48] Hospitals continue to be targeted despite claims of moral restraint among attackers.
  • [18:44] Prevention basics still matter including strong passwords, multi-factor authentication, and timely patching.
  • [19:18] Cynthia explains the value of layered defense and incident-response practice drills.
  • [21:22] Even individuals need cyber hygiene like unique passwords, MFA, and updated antivirus protection.
  • [23:32] Deepfakes are becoming a major threat vector, blurring trust in voice and video communications.
  • [25:17] Always verify using a separate communication channel when asked to send money or change payment info.
  • [27:40] Real-world example: credential-stuffing attack against MLB highlights the need for two-factor authentication.
  • [29:55] What to do once ransomware hits includes containment, external counsel, and calling trusted law-enforcement contacts.
  • [32:44] Cynthia recounts being impersonated online and how she responded to protect others from fraud.
  • [34:28] Many victims feel ashamed to report cybercrime, especially among older adults.
  • [36:45] Scams often succeed because they align with real-life timing or emotional triggers.
  • [38:32] Children and everyday users are also at risk from deceptive links and push-fatigue attacks.
  • [39:26] Overview of Halcyon's Ransomware Research Center and its educational, collaborative goals.
  • [42:15] The importance of public-private partnerships in defending hospitals and critical infrastructure.
  • [43:38] How AI-driven behavioral detection gives defenders a new advantage.
  • [44:48] Cynthia shares optimism that technology can reduce ransomware's impact.
  • [45:43] Closing advice includes practicing backups, building layered defenses, and staying hopeful.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Links and Resources:

Jaksot(321)

Art Heists

Art Heists

The world of art theft looks glamorous in the movies, but the reality is far more complicated. From multi-million dollar forgery schemes to undercover FBI operations recovering stolen national treasur...

29 Huhti 37min

The Power of Prediction

The Power of Prediction

We make predictions all the time including about the weather, about traffic, about what someone is going to say next. It feels natural, even rational. But when algorithms start making predictions abou...

22 Huhti 39min

Privacy vs Reality

Privacy vs Reality

Online security advice often sounds simple until you actually try to follow it. Between password managers, privacy settings, and data brokers, protecting yourself can start to feel like a full-time jo...

15 Huhti 58min

Wired to Trust

Wired to Trust

It's easy to think scams only work when someone misses something obvious. In reality, most of them don't look obvious at the start. They show up as normal situations with just enough friction to notic...

8 Huhti 41min

Intimate Partner Fraud

Intimate Partner Fraud

Most scams leave a digital trail. A fake email, a spoofed number, a fraudulent website. You can trace them, report them, sometimes even reverse them. But what happens when the scam has no digital trai...

1 Huhti 45min

Identity without Passwords

Identity without Passwords

Every day, employees at hotels, restaurants, and resorts across the country are doing exactly what they were hired to do: being warm, responsive, and eager to help. It's what makes hospitality work. I...

25 Maalis 38min

When Cybercrime Gets Personal

When Cybercrime Gets Personal

Most security breaches don't begin with sophisticated code or elaborate technical exploits. They begin with a phone call, a convincing email, or someone at a help desk who just wanted to be helpful. T...

18 Maalis 45min

Stopping Phone Scams

Stopping Phone Scams

Phone scams get dismissed as background noise or just annoying interruptions and unknown numbers with robotic voices we learn to ignore. But behind that noise is an industry built on psychology, autom...

11 Maalis 45min

Suosittua kategoriassa Politiikka ja uutiset

uutiscast
aikalisa
politiikan-puskaradio
rss-ootsa-kuullut-tasta
ootsa-kuullut-tasta-2
tervo-halme
rss-podme-livebox
aihe
rss-ulkopoditiikkaa
viisupodi
rss-pinnalla
the-ulkopolitist
et-sa-noin-voi-sanoo-esittaa
rss-vaalirankkurit-podcast
rss-asiastudio
radio-antro
rss-tasta-on-kyse-ivan-puopolo-verkkouutiset
otetaan-yhdet
rss-mina-ukkola
rss-polikulaari-pitka-kiekko-ja-muut-ts-podcastit