#threat-intel#ransomware#raas
Who Ya Gonna Call? Meet Ransom Busters
A ransomware crew is selling incident response to the companies it just attacked. The audacity is impressive. The packaging is the actually interesting part.
Aug 20, 20267 min read
// threat intel · ai agents · the stuff that breaks
Threat intelligence, AI agents, and the stuff that breaks when you mix them. Ten years of watching the same fight, written down as I go.
// latest dispatch
A ransomware crew is selling incident response to the companies it just attacked. The audacity is impressive. The packaging is the actually interesting part.
I stopped writing here for a while. Here is the honest reason why, and what I am going to do about it.
How I gave my agents a memory that survives the session, using a folder of Markdown files and about fifteen minutes.
// about
I lead a threat intelligence research team of nine. I spend my time watching how threat actors actually operate, and building agents that help me do it.
Learn more{
"focus": [
"threat actors",
"threat intelligence",
"agentic ai",
"the human layer"
],
"writes_about": "what i actually know",
"filler": false
}