- South Korean cult-horror series 'Hellbound' returns at BIFF
- Nepalis fear more floods as climate change melts glaciers
- Honduras arrests environmentalist's alleged murderer
- Padres pitcher Musgrove needs elbow surgery
- Supreme Court lets stand rules to curb mercury, methane emissions
- Boston beat Denver in NBA exhibition season opener, but Jokic says omens are good
- Chagos diaspora angry at lack of input on islands' fate
- Biden says 'not confident' of peaceful US election
- US trade chief defends tariff hikes when paired with investment
- Lukaku stars as Napoli beat Como to hold Serie A top spot
- Ohtani set for MLB playoff debut as Dodgers face Padres
- Pogba's drug ban cut to 18 months from four years
- Devine leads New Zealand to big win over India in Women's T20 World Cup
- Bosnia floods kill 16 people
- EU court blocks French ban on vegetable 'steak' labelling
- Prosecutors seek dismissal of rape charges against French rugby players
- Meta AI turns pictures into videos with sound
- Bolivia's Morales says claims he raped a minor are a 'lie'
- MLB Reds hire two-time champion Francona as manager
- Daniel Maldini receives first Italy call-up for Nations League
- US dockworkers return to ports after three-day strike
- Ancelotti points finger at Madrid's 'lack of intensity'
- Haiti reeling after 70 killed in gang attack
- Five Czech kids in hospital over TikTok 'piercing challenge'
- What happens next in Iran-Israel conflict?
- Country star Garth Brooks denies rape accusations
- Stubbs hits maiden century as South Africa make 343-4 against Ireland
- DR Congo to begin mpox vaccination campaign Saturday in east
- Odegaard injury has forced Arsenal to be 'different', says Arteta
- Ratcliffe refuses to guarantee Ten Hag's Man Utd future
- Meta must limit data use for targeted ads: EU court
- Mauritius to hold legislative election on November 10
- Britain qualify for America's Cup final after 60-year wait
- IMF asks Sri Lanka to protect hard-won gains
- Morata returns to Spain Nations League squad after injury
- Irish regulator to probe Ryanair use of facial recognition
- Public allowed to see video evidence in France mass rape trial
- US hiring soars past expectations in sign of resilient market
- Under-fire Ten Hag 'together' with Man Utd hierarchy
- Guardiola talks of Man City love affair as financial hearing rumbles on
- De Bruyne out of Belgium Nations League squad
- Japanese trainer Yahagi hopes Shin Emperor achieves 50-year-old Arc dream
- UK's Starmer hails 'landmark' carbon capture funding
- As EU targets Chinese cars, European rivals sputter
- Bosnia floods kill 14 people
- Tennis world number one Swiatek splits with coach Wiktorowski
- Liverpool share responsibility for Nunez goal drought, says Slot
- Top EU court finds against FIFA in key transfer market ruling
- Top seed Sabalenka stunned by Muchova in Beijing last eight
- Tsitsipas gets revenge against Nishikori at Shanghai Masters
Cybercrime groups restructuring after major takedowns: experts
Cybercrime gangs are looking to rebuild with new tactics after global police operations this year made a huge dent in their activities, experts have told AFP.
The gangs have had a bad year so far, with law enforcement operations taking out some of prominent groups including LockBit, a loose network of largely Russian-speaking cyber criminals.
LockBit was one of the major developers of malicious software that allows criminals to lock victims out of their networks, steal their data and demand a ransom for its return.
Ransomware attacks using LockBit and other software have led to major disruption of governments, businesses and public services like hospitals.
Victims have paid hundreds of millions of dollars to gangs, usually in untraceable cryptocurrencies.
The disruption of LockBit in February and another network of malicious bots in May led to a "cleaning up" of the ransomware scene, said Nicolas Raiga-Clemenceau of the XMCO consultancy in France.
But he said "a number of new groups" had since appeared and started to organise themselves.
Allan Liska of US cybersecurity firm Recorded Future agreed and said there were worrying trends emerging with some of the new groups.
- 'Violence as service' -
Some of the newer gangs appeared to be considering threats of physical violence rather than just online intimidation, he said.
Liska pointed out that gangs would already have stolen a bunch of personal information, like the addresses of senior executives.
"And so if you're not getting anywhere in your negotiations, that's something you can threaten," he said.
"We're going to do something in the real world to hurt you or hurt your family."
He called this "violence as a service".
Liska and other experts are still assessing the new landscape, saying a bunch of new groups had emerged.
"There's about a dozen of them that have popped up since the LockBit takedown, which is a higher number than we've ever seen in that short period of time," he said.
They had all launched extortion websites that showed lists of victims, but it was unclear how effective the new groups would be, he added.
- 'Bounce back' -
LockBit's operations were taken down by law enforcement in February.
The gang had targeted over 2,000 victims and received more than $120 million in ransom payments since it formed four years ago, according to US authorities.
Those targeted have included Britain's Royal Mail postal service, US aircraft manufacturer Boeing and a Canadian children's hospital.
The US authorities said hundreds of encryption keys had been recovered and given to victims, and the network's services had effectively been taken over.
But the software is still out there.
A gang attacked a government data centre in Indonesia last month using LockBit, asking for $8 million in ransom.
And experts interviewed by AFP agreed that ransomware attacks were likely to rebound quickly -- possibly in the next few months.
"It's going to bounce back," said Liska.
"Right now there's just so much money in ransomware that people don't want to stop."
A.Seabra--PC