DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
Summary
The DevMan ransomware-as-a-service (RaaS) operation utilizes a dedicated web portal for its affiliates. This portal allows them to build payloads, manage victims, and handle affiliate payouts, centralizing the RaaS scheme's operations. Cybersecurity firm PRODAFT is tracking this RaaS operation as Funky Mantis.
IFF Assessment
The centralisation of RaaS operations through a dedicated portal for affiliates makes the ransomware scheme more efficient and potentially harder to disrupt, posing a greater threat to defenders.
Defender Context
The development of centralized RaaS portals signifies a maturation of ransomware operations, offering affiliates streamlined tools for attack execution and management. Defenders should be aware of the increasing sophistication and efficiency of RaaS groups, which can lead to more widespread and impactful attacks.