De-anonymizing ransomware domains on the dark web

Cisco Talos researchers developed three techniques to identify ransomware operators' dark websites hosted on public IPs, allowing them to uncover previously unknown infrastructure for the DarkAngels, Snatch, Quantum, and Nokoyawa ransomware groups.