Author

Jim Walter

Jim Walter is a Senior Threat Researcher at SentinelOne focusing on evolving trends, actors, and tactics within the thriving ecosystem of cybercrime and crimeware. He specializes in the discovery and analysis of emerging cybercrime "services" and evolving communication channels leveraged by mid-level criminal organizations. Jim joined SentinelOne following ~4 years at a security start-up, also focused on malware research and organized crime. Previously, he spent over 17 years at McAfee/Intel running their Threat Intelligence and Advanced Threat Research teams.

Keep up with the latest

Blog posts by Jim Walter

From the Front Lines
Dec 11, 2025
CyberVolk Returns | Flawed VolkLocker Brings New Features With Growing Pains
From the Front Lines
Jul 21, 2025
SharePoint ToolShell | Zero-Day Exploited in-the-Wild Targets Enterprise Servers
From the Front Lines
Jul 17, 2025
Katz Stealer | Powerful MaaS On the Prowl for Credentials and Crypto Assets
Company
May 12, 2025
Anti-Ransomware Day 2025: 10 Years of RaaS and the Making of a Billion-Dollar Business
From the Front Lines
May 3, 2025
DragonForce Ransomware Gang | From Hacktivists to High Street Extortionists
From the Front Lines
Mar 19, 2025
Dragon RaaS | Pro-Russian Hacktivist Group Aims to Build on "The Five Families" Cybercrime Reputation
From the Front Lines
Jan 23, 2025
HellCat and Morpheus | Two Brands, One Payload as Ransomware Affiliates Drop Identical Code
From the Front Lines
Aug 8, 2024
DeathGrip RaaS | Small-Time Threat Actors Aim High With LockBit & Yashma Builders
From the Front Lines
May 21, 2024
Ikaruz Red Team | Hacktivist Group Leverages Ransomware for Attention Not Profit
From the Front Lines
Apr 24, 2024
Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit
From the Front Lines
Feb 27, 2024
February 2024 Cybercrime Update | Commercial Spyware, AI-Driven APTs & Flawed RMMs
Cloud
Feb 14, 2024
Kryptina RaaS | From Underground Commodity to Open Source Threat

Jim Walter

Blog posts by Jim Walter

CyberVolk Returns | Flawed VolkLocker Brings New Features With Growing Pains

SharePoint ToolShell | Zero-Day Exploited in-the-Wild Targets Enterprise Servers

Katz Stealer | Powerful MaaS On the Prowl for Credentials and Crypto Assets

Anti-Ransomware Day 2025: 10 Years of RaaS and the Making of a Billion-Dollar Business

DragonForce Ransomware Gang | From Hacktivists to High Street Extortionists

Dragon RaaS | Pro-Russian Hacktivist Group Aims to Build on "The Five Families" Cybercrime Reputation

HellCat and Morpheus | Two Brands, One Payload as Ransomware Affiliates Drop Identical Code

DeathGrip RaaS | Small-Time Threat Actors Aim High With LockBit & Yashma Builders

Ikaruz Red Team | Hacktivist Group Leverages Ransomware for Attention Not Profit

Ransomware Evolution | How Cheated Affiliates Are Recycling Victim Data for Profit

February 2024 Cybercrime Update | Commercial Spyware, AI-Driven APTs & Flawed RMMs

Kryptina RaaS | From Underground Commodity to Open Source Threat