THE ORIGIN OF THREAT GROUPS: SETTING THE FOUNDATION

From duo.com

Human resource representatives. Performance reviews. “Employees of the month.” These are part of the strategies that have shaped some of the behind-the-scenes operations of the Conti ransomware group, which were unearthed after a self-reported security researcher set up a Twitter account in late February called “Conti Leaks” and has since then been leaking two years worth of the group’s internal chat logs, in addition to credentials, email addresses and command-and-control (C2) server details.

Read more…