Dennis Fisher talks with Kimberly Goody from FireEye's cybercrime analysis team about the DarkSide ransomware operation, the emergence of the ransomware-as-a-service model, and what might be next for these groups.
CISA and other federal agencies are expanding their incident response capacities, but there is discussion of tapping into private sector resources during major incidents.
The attack on Colonial Pipeline has focused the attention of the FBI and White House on the DarkSide ransomware developers and its operators.
The DarkSide ransomware hit the Colonial Pipeline on Friday, forcing the company to take its main distribution lines offline to recover.
Slowing or stopping the global ransomware threat will take cooperation among government, enterprises, and law enforcement.