As the world of cybercrime evolves, threat actors will look to utilise any methods at their disposal to gain an advantage within the cybercriminal landscape. This, however, does not preclude them from utilising the same developing technologies as legitimate businesses; in an effort to gain an advantage. The number of “as-a-service” offerings has exploded over the last decade, with many of these mechanisms being implemented throughout businesses across the globe due to their numerous benefits. Cybercriminals have noticed this also, and as such, “as-a-service” has become a core part of the cybercrime landscape.

This talk will explore how Cybercrime-as-a-Service fits into the larger cybercriminal toolkit; detailing the numerous offerings, from Malware-as-a-Service to DDoS-as-a-Service and how these benefit the groups that use them. It will also aim to investigate the unique threats that the “as-a-service” offerings pose, and the wider effect this has on the tactics, techniques, and procedures of the threat actors utilising them.