Skip to content

Ransomware-as-a-Service affiliate model

Named by 2 kept items in this workspace.

Search every workspace for Ransomware-as-a-Service affiliate model. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
    article2026-10-28It is written here as Ransomware-as-a-service affiliate model: affiliates deploy the malware and pay the administrators a share (20%) of ransom proceeds.

    20%

  • Decoding NightSpire: Ransomware IOCs Aren't Set in Stone
    writeup2026-04-07It is written here as Ransomware-as-a-Service (RaaS) affiliate model.

    Core developers create and maintain the file encryptor and infrastructure, sometimes managing negotiations/data review, then sell the encryptor to third-party affiliates who execute attacks, causing IOC/TTP variation between attacks even under the same ransomware brand

All techniques in this workspace.