Page 249 - Cyber Defense eMagazine September 2025

Privileged Access in the Age of Ransomware-as-a-Service (RaaS)

Ransomware Has Become a Service Economy

By Sandeep Dommari, Principal Architect, Ping Identity

Introduction: Ransomware Has Become a Service Economy

Ransomware was once the product of lone cybercriminals creating rudimentary malware. It's an industry
now. On dark web marketplaces, ransomware-as-a-service (RaaS) kits are offered for sale and rental,
complete with user guides, revenue-sharing plans, and customer support. By signing up for a "service,"
even inexperienced attackers can now initiate enterprise-grade ransomware campaigns.

The most hazardous aspect? These operations thrive by taking advantage of privileged access rather
than just malware. The "master keys" that attackers require are cloud keys, VPN login credentials, and
domain admin accounts. They enable ransomware to spread laterally, encrypt systems at scale, and
disable backups once they are stolen or misused.

The lesson for today's executives is straightforward: RaaS attacks are fueled by privileged access.

Cyber Defense eMagazine – September 2025 Edition 249
Copyright © 2025, Cyber Defense Magazine. All rights reserved worldwide.