Experts weigh cybercrime's national security threat
An expert panel discusses how cybercrime, ransomware, and identity fraud increasingly intersect with national security and state-sponsored activity.
Sourceatlanticcouncil.org — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
This Atlantic Council 5x5 piece brings together five cybersecurity and law enforcement experts to discuss the intersection of cybercrime and national security. Panelists highlight that ransomware attacks against critical infrastructure (citing Colonial Pipeline, Kaseya, and Conti's attack on Costa Rica) have shifted cybercrime from a purely economic issue to a national security concern. Experts note that financially motivated cybercriminals and state-sponsored actors often share TTPs and infrastructure, with criminal networks sometimes serving as proxies providing plausible deniability for government-linked operations.
The discussion covers emerging trends including the access-broker-to-ransomware pipeline (with an average 71-day gap between initial access sales and ransomware deployment), credential-stealing malware like RedLine, Vidar, and Raccoon fueling roughly half of ransomware attacks via compromised credentials, synthetic identity fraud, SIM swapping to bypass MFA, and business email compromise (BEC) schemes that generate far greater financial losses than ransomware ($2.4 billion vs $49.2 million in 2021 per IC3 data). The piece is a policy/trend discussion rather than a technical threat report, referencing SolarWinds as a supply chain attack example and discussing international cooperation frameworks like the Budapest Convention and competing Russian-proposed UN cybercrime treaty.
Overall, this is an informational policy piece with no specific active threats, IOCs, or named campaigns—focused on strategic recommendations for public-private cooperation, international law enforcement collaboration, and resource allocation to counter transnational cybercrime networks.
Mentioned in this report
Source reporting: https://www.atlanticcouncil.org/content-series/the-5x5/the-5x5-cybercrime-and-national-security
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. In the app the same report carries live profiles of the malware it names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,445 reports from 149 sources, 666 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs