AI Summary
5 min readIn 2018, security researcher Jon DiMaggio watched a ransomware adversary remotely disable a victim company’s endpoint detection and response (EDR) service from inside the network. The attacker had already gained administrative privileges, and the security tool—designed to flag malicious activity—was simply turned off. That moment captures a central tension in modern cybercrime: the technical sophistication of the attackers often outpaces the defensive posture of the organizations they target, and the consequences fall hardest on the people who never chose to be in the fight.
How Ransomware Became a Service Industry
DiMaggio traces the modern ransomware boom to a business model shift that began around 2018–2019. Earlier strains like CryptoLocker (the “seed being planted”) and SamSam (attributed to Iranian operators in 2015) were relatively contained. The explosion came with ransomware-as-a-service (RaaS), a partnership structure where one group develops the malware, infrastructure, and data leak sites, and then recruits affiliates—digital mercenaries—to carry out the actual breaches. The developer provides what DiMaggio calls “the gun”: a ransomware builder that creates unique payloads with decryption keys for each attack. The affiliate does the dirty work, and the two sides split the profits.
Continue reading the full summary in the app — free to try.
Read Full Summary →Free • No credit card required
Never miss an episode of Cyber Crime Junkies
Get every new episode summarized in your inbox — free, ~5 minutes to read.
No spam. Unsubscribe anytime.
What you'll learn
- 1 (02:20) **Jon DiMaggio’s Background and Focus on Human Intelligence** - Former NSA analyst explains his shift from espionage to cybercrime research and the human-intelligence approach of engaging directly with criminals.
- 2 (05:05) **The Productization of Cybercrime and Ransomware-as-a-Service** - DiMaggio traces the evolution from early ransomware to the modern affiliate model that exploded the threat landscape.
- 3 (10:45) **How Affiliates Breach Organizations: Initial Access Brokers and Unpatched Systems** - DiMaggio details the two primary methods criminals use to get inside networks, including a surprising shift toward exploiting technical vulnerabilities.
- 4 (15:45) **Why Organizations Fail to Detect Intruders: Living Off the Land** - DiMaggio explains how sophisticated adversaries evade detection by using legitimate system tools against their victims.
- 5 (18:49) **The IT vs. Security Distinction and Why Healthcare is a Top Target** - The conversation clarifies that IT monitoring and security monitoring are different functions, explaining why certain sectors are more vulnerable.
- 6 (23:12) **Why Ransomware Gangs Operate With Impunity** - DiMaggio explains the geopolitical and legal reasons why Russian-speaking ransomware gangs are rarely arrested.
- 7 (28:22) **The Human Motives of Cybercriminals: Poverty, Greed, and False Morality** - DiMaggio shares insights from his direct conversations with hackers, revealing their justifications and the reality of their targets.
+ Full timestamped outline available in the app
Show Notes
Expert Security Researcher, Jon DiMaggio, former National Security Agency (NSA) analyst, takes us under cover on the Dark Web, providing us insight in plain terms on:
- ransomware explained for small business and ransomware risks for small business,
- how cyber attacks stay undetected,
- how intelligence gathering is critical to security,
- secrets of cyber crime gangs,
- how stolen data is sold by cyber criminals, and
- understanding the hacker mind.
Don’t miss Jon’s book, The Art of Cyber Warfare: https://a.co/d/a2r7C5G
True crime enters our homes and businesses daily. Learn from actual people who fight it daily and show you how in a thriller story. The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.
Special Author pricing (30% off)
The Moving Target Trilogy. Book 3 to be released September 22nd, 2026. Start with any of them. Be a Moving Target.
Special Author pricing (30% off)
Growth without Interruption. Get peace of mind. Stay Competitive-Get NetGain. Contact NetGain today at 844-777-6278 or reach out at [email protected] or find more at www.NETGAINIT.com
Want to Watch?
Subscribe and stop reading about it after it happens: https://www.youtube.com/@CyberCrimeJunkies?sub_confirmation=1
Hosted by David Dean Mauro. Former trial lawyer, AI Security Advisor, FBI InfraGard member, VP of Strategic Growth at NetGain Technologies, and author of the Moving Target Trilogy (#1 Amazon Hot New Release, 2026).
MOVING TARGET TRILOGY. Nonfiction cybercrime thrillers. 🔥 4 years. 400+ interviews.
Book 1, Art of Online Camouflage: https://shop.ingramspark.com/b/084?params=d0YQ1pYtxeBRmSQLHLb9uT4aOliPrEuDSfOjQgpXQP9
Book 2, Obedient Machine: https://shop.ingramspark.com/b/084?params=S3F9zWWMC2y2eYiTmUGP91Owy9AUVG4zbLa6NwuX3cl
Book 3, The Ghost and The Machine. Presale open now, releases September 22, 2026: More from this podcast