Webinar Description
Key Takeaways
- Analysis of Cl0p ransomware group tactics based on review of ten campaigns
- Focus on how Cl0p selects targets based on internet-facing applications rather than industry sector
- Coverage of exploitation patterns across file transfer tools, ERP systems and engineering data platforms
- Guidance on detection timing, extortion timelines and forensic evidence gathering
- Designed for security professionals, risk managers and executives responsible for cyber risk
About the Event
This 30-minute webinar from Citalid examines the evolving tactics of the Cl0p ransomware group, drawing on threat intelligence gathered from ten documented campaigns. The session is led by Citalid’s CTI Analyst and Marketing Manager, with a replay available for those unable to attend live.
Cl0p Targeting Methodology
A central theme of the webinar is Cl0p’s approach to target selection. The group prioritises organisations based on the types of internet-facing applications they operate rather than the industry they belong to. This means businesses running vulnerable file transfer tools, enterprise resource planning (ERP) systems or product lifecycle management (PLM) platforms face elevated risk regardless of sector.
The session will examine recent incidents where Cl0p exploited these application categories, helping attendees understand which parts of their technology stack may increase exposure to this threat actor.
Detection and Response Challenges
The webinar addresses the practical difficulties organisations face when responding to extortion campaigns. Topics include the timing challenges associated with detecting Cl0p activity, understanding the typical extortion timeline and identifying what forensic evidence organisations should gather following a breach. This guidance aims to improve incident response readiness and support post-attack investigations.
Who Should Attend
The webinar is designed for security and IT professionals including CISOs, security analysts and IT managers. Risk managers, compliance officers and executives with cyber risk responsibilities will also find the content relevant. Organisations in manufacturing, professional services and other sectors relying on critical business applications are particularly well suited to the session, as are those concerned with third-party and supply chain cyber risk.