Hello, We’re Doomed

Ransomware as a Service (RaaS) isn’t a new concept, but it only just got on my radar via the latest episode of Security Now. Tripwire has a good explainer here:

Ransomware-as-a-Service (RaaS) borrows from the Software-as-a-Service (SaaS) model. This subscription-based malicious model enables even the novice cybercriminal to launch ransomware attacks without much difficulty. You can find various RaaS packages in the market that reduce the need to code malware. As such, it is commonly used by cybercriminals who don’t have much technical knowledge of how to create ransomware. This malicious model allows anyone to become an “affiliate” of an established RaaS package or service.

So yes: we’re doomed-dee-doomed-dee-doomed.