Operation Bonfire: From One Ransomware Sample to the Discovery of a C2 Network

During this presentation, NCSC offers an insight into an investigation regarding a widespread ransomware campaign. The investigation started with only a few ransomware samples, yet lead to the discovery of a C2 network used by actors to deploy multiple ransomware families. Working together with local and international partners, NCSC managed to map the infrastructure and identified victims worldwide. NCSC will explain why NCSC got engaged in this investigation, focusing on the modus operandi of the actors.