GuidePoint Security’s Research and Intelligence Team (GRIT) developed a detailed Ransomware Taxonomy and Lifecycle to classify ransomware groups based on observed behaviors over time. Initially categorized as Ephemeral, Splinter, Rebrand, or Full-Time, the taxonomy distinguishes short-term and long-term groups, including their evolution through splintering or rebranding. By late 2022, GRIT refined this framework to add greater granularity and insights, introducing categories like Emerging groups. This taxonomy aids organizations in understanding ransomware threats comprehensively, improving detection, response, and mitigation strategies.

Join for free to read