Behind the scenes of ransomware negotiation | Guest Tony Cook

Published: Nov. 14, 2022, 7 p.m.

b'

Tony Cook of GuidePoint Security knows a lot about threat intelligence and incident response. But he\\u2019s also used these skills while working in ransomware negotiation! Cook has handled negotiations for all the big threat groups \\u2014 REvil, Lockbit, Darkside, Conti and more \\u2014 and he told me about what a ransomware negotiator can realistically accomplish, which threat groups are on the rise, and why negotiating with amateurs is sometimes worse and harder than dealing with elite cybercriminals.\\xa0

\\u2013 Get your FREE cybersecurity training resources: https://www.infosecinstitute.com/free
\\u2013 View Cyber Work Podcast transcripts and additional episodes: https://www.infosecinstitute.com/podcast

0:00 - Ransomware negotiating\\xa0
2:42 - How Tony Cook got into cybersecurity
4:00 - Cook's work at GuidePoint\\xa0
9:31 - Life as a ransomware negotiator\\xa0
11:41 - Ransomware negotiation in 2022
13:52 - Stages of a successful ransomware negotiation\\xa0
15:23 - How does ransomware negotiation work?
19:11 - The difference between threat-acting groups
20:43 - Bad ransomware negotiating
22:43 - Ransomware negotiator support staff
25:21 - Ransomware research
26:26 - Is cyber insurance worth it?\\xa0
29:14 - How do I become a ransomware negotiator?\\xa0
32:25 - Soft skills for a ransomware negotiator
33:46 - Threat research and intelligence work
37:45 - Learn more about Cook and GuidePoint
38:17 - Outro

About Infosec
Infosec believes knowledge is power when fighting cybercrime. We help IT and security professionals advance their careers with skills development and certifications while empowering all employees with security awareness and privacy training to stay cyber-safe at work and home. It\\u2019s our mission to equip all organizations and individuals with the know-how and confidence to outsmart cybercrime. Learn more at infosecinstitute.com.

'