{"id":"W7131275193","doi":"10.1109/idss67199.2025.11398337","title":"Ransomware-as-a-Service and its Evolution: Lessons from the Babuk, GandCrab, and Sodinokibi Families","year":2025,"lang":"","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University; McGill University","funders":"","keywords":"Ransomware; Malware; Obfuscation; Malware analysis","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001511996,0.0003790223,0.0003196927,0.002846287,0.001108921,0.001173282,0.0004984114,0.0006697142,0.0005553177],"category_scores_gemma":[0.006887936,0.0002041303,0.0002015052,0.001666605,0.001238722,0.002363626,0.0009058149,0.0009912315,0.0003389571],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008794034,"about_ca_system_score_gemma":0.0004471317,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.005492318,"about_ca_topic_score_gemma":0.008996624,"domain_scores_codex":[0.9990913,0.0002157364,0.00004167366,0.0001805818,0.0003457655,0.0001249884],"domain_scores_gemma":[0.9966054,0.001097948,0.0007904398,0.0005517469,0.0007268058,0.0002276371],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.000319807,0.0003953566,0.7074248,0.0001344726,0.0000810682,0.001783477,0.0113098,0.007935465,0.008401633,0.01186154,0.006491177,0.2438614],"study_design_scores_gemma":[0.00001629008,0.000422485,0.7720748,0.0002804686,0.00006311268,0.00657332,0.01643409,0.1412474,0.01261356,0.01167372,0.03842216,0.0001785692],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9942691,0.0005235136,0.00260593,0.000531183,0.00001896031,0.00001817119,0.0001836553,0.00005139594,0.001797989],"genre_scores_gemma":[0.9947003,0.0003083191,0.003643996,0.00008872902,0.00001748571,0.00001359719,0.0004405966,0.00004136175,0.0007456072],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.005492318,"threshold_uncertainty_score":0.0109207,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01600020813497821,"score_gpt":0.279375130839381,"score_spread":0.2633749227044028,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}