We had the pleasure of attending a captivating research seminar led by David Décary-Hétu (School of Criminology, Université de Montréal).
He shared his analysis of real exchanges between cyber attackers and ransomware victim companies, offering a concrete and fascinating perspective on the dynamics of online negotiation.
Seminar Summary
A ransomware attack is not only a technical compromise of an organization; it is also a negotiation game, even a chess match. In this talk, David Décary-Hétu examines 133 recorded conversations and more than 7,000 messages exchanged between ransomware gangs and their victims. This provides a unique perspective on how these shadow operators combine intimidation, persuasive rhetoric, and even dark humor to achieve their goals.
He takes a deep dive into the qualitative nuances of these dialogues, decoding linguistic strategies, psychological tactics, and power dynamics that define the art of ransomware negotiation. Each conversation becomes a case study of negotiations oscillating between surrender and resistance.
Beyond the numbers and narratives, the presentation uses real conversations to clearly illustrate how these exchanges unfold. Through this data, the goal is to better prepare organizations and individuals against the all-too-common threat of ransomware, and to provide defenders, incident responders, and policymakers with concrete strategies to disrupt criminal networks and mitigate future risks.