Jason Baker | Source | Senior Threat Intelligence Consultant at GuidePoint Security
Jason Baker
Jason Baker is a Threat Intelligence Consultant on GuidePoint Security’s consulting team, where he engages in threat intelligence program development, as well as incident response investigations and reporting on behalf of the firm’s clients. His career background includes strategic cyber threat intelligence analysis and intelligence program management in the private and public sector.
Jason joined the GuidePoint team from UnitedHealth Group, where he worked as a senior Cyber Threat Intelligence Analyst responsible for enterprise analysis and support to incident response. Prior to that, Jason served 10 years in the United States Marine Corps and Department of Defense as a counterintelligence agent and analyst, in both military and civilian roles.
Jason’s intelligence experience includes 5 years supporting global counterterrorism efforts, as well as 4 years as a subject matter expert in cyber threats, analytic tradecraft, and intelligence-operations integration. Jason holds a Master of Business Administration degree from the University of Maryland, a Bachelor of Arts degree from Hamline University, and several CompTIA and GIAC certifications.
-
GuidePoint Security
Senior Threat Intelligence Consultant
-
Lurie Children's Hospital investigating claims "Rhysida" could be behind ransomware attack
Earlier this month, the hospital confirmed it experienced a cyberattack from an outside threat.
Article -
RansomHub Brings Scattered Spider Into Its RaaS Nest
The threat group behind breaches at Caesars and MGM moves its business over to a different ransomware-as-a-service operation.
Article -
Worldwide Web: An Analysis of Tactics and Techniques Attributed to Scattered Spider
Additional authors: Rui Ataide and Hermes Bojaxhi Executive Summary In early 2024, we identified a current affiliate of the RansomHub
Article
-
Speaking only to the operations of RansomHub, affiliates of the group have claimed at least 72 victims on their data leak site since emerging publicly in February 2024, a volume that is unusually high for an otherwise seemingly "new" group. We assess that this is a result of RansomHub's marketing towards experienced affiliates from other Ransomware-as-a-Service groups.
RansomHub's claimed victims are primarily aligned with the Technology (19.4%), Retail and Wholesale (11.1%) , Consulting (8.3%), Energy (8.3%), Government (6.9%), and Healthcare (6.9%) sectors. Impacted organizations are most commonly located in the United States (34.7%), Brazil (12.5%), and Western European nations (19.4%).
We do not know if Scattered Spider actors have affiliated exclusively with RansomHub, or if some actors may affiliate with other RaaS groups. We present the statistics here for RansomHub as a RaaS organization, but do not know what portion of RansomHub operations are conducted by Scattered Spider actors vs. other affiliates.
