Senior Technical Advisor at CISA, helping ensure a safer tech ecosystem for all. Prev: @HSGAC @KrebsStamos @DefenseDigital. @Stanford CS. Views are mine.
May 5, 2023 • 12 tweets • 5 min read
Excited to share new research with Ian Gray, Ben Brown, Vlad Cuiujuclu and Damon McCoy.
This is the first in-depth peer-reviewed research into the Conti leaks. We mapped over $80 million in new payments to Conti.
Read the paper:
Some takeaways 🧵 arxiv.org/abs/2304.11681
This paper was published as part of the APWG Symposium on Electronic Crime Research, for which we received the best paper award.
Read the preprint at arxiv.org/pdf/2205.05028…. Some takeaways 👇
While ransomware has been around a while, the advent of Ransomware as a Service (RaaS) has led to a massive increase in profit for ransomware cybercriminals.
Jul 8, 2021 • 6 tweets • 2 min read
Today, I'm excited to launch Ransomwhere, the open, crowdsourced ransomware payment tracker. Check out the site and contribute data at ransomwhe.re and follow @ransomwhere_ for updates.
Thread on where I see this going:
Today, there's no comprehensive public data on the total number of ransomware payments. Without such data, we can't know the full impact of ransomware, and whether taking certain actions changes the picture.
Just finished 2x read-through of the new Executive Order. The EO can significantly shift not only how the federal gov treats cybersecurity, but also the state of security across industry and broader public sector. A thread on what I’m hoping to see from it. 🧵
First: CISA! @CISAgov is at a defining moment coming out of 2020 as a several years-old agency. The EO entrusts CISA with well-deserved responsibilities, and this will further elevate its role leading the charge to secure the federal gov and critical infrastructure.
Apr 19, 2021 • 7 tweets • 3 min read
Read this bipartisan letter from election officials charting a path forward for CISA to keep fighting disinformation about electoral processes.
CISA has gained remarkable trust from election officials in a few years. Why? Election security is not political sos.state.co.us/pubs/newsRoom/…
Remember where we came from: in 2017, the National Association of Secretaries of State passed a resolution opposing the designation of elections as critical infrastructure, expressing concerns in interfering with state sovereignty over elections.