Loading…
Streaming: https://mssvideo.vcu.edu/RVAsec
Tuesday June 9, 2026 3:00pm - 3:50pm EDT
Ransomware attacks are the visible event. The access economy enabling them is not. This session maps that economy — how access is acquired, automated, and converted into ransomware deployment — using intelligence from years of undercover operations inside the criminal underground. Attendees will leave with a working model of how initial access brokers operate, and a concrete illustration of how fast CVE exploitation moves from public disclosure to active resale: in February 2026, operatives observed IABs selling confirmed access attributed to a critical BeyondTrust vulnerability within 17 days of vendor advisory. The session closes with a case study of an ALPHV affiliate whose documented operational mistakes contributed to a DOJ prosecution — and a framework for how the private-sector-to-law-enforcement intelligence loop works when it functions correctly.
Speakers
avatar for Thomas Nance

Thomas Nance

Director of Intelligence Services, Darkweb IQ
Thomas Nance is the Director of Intelligence Services at Darkweb IQ and a former CIA Operations Officer, where he conducted espionage and counterterrorism missions built on human source development and clandestine collection. He specializes in applying HUMINT tradecraft to cybercrime... Read More →
Tuesday June 9, 2026 3:00pm - 3:50pm EDT
Downstairs, Madison / Jefferson / Monroe

Log in to save this to your schedule, view media, leave feedback and see who's attending!

Share Modal

Share this link via

Or copy link