{"id":"W7131275193","doi":"10.1109/idss67199.2025.11398337","title":"Ransomware-as-a-Service and its Evolution: Lessons from the Babuk, GandCrab, and Sodinokibi Families","year":2025,"lang":"","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University; McGill University","funders":"","keywords":"Ransomware; Malware; Obfuscation; Malware analysis","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0004409783,0.0005117155,0.0004740683,0.0002138511,0.001281826,0.0006232589,0.001139044,0.0003067517,0.0001114288],"category_scores_gemma":[0.0002376126,0.0004051077,0.00008842586,0.00144014,0.0003125937,0.001218437,0.001528605,0.0005871545,0.00004571944],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000122997,"about_ca_system_score_gemma":0.0002980262,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002331443,"about_ca_topic_score_gemma":0.001806202,"domain_scores_codex":[0.9969007,0.000241516,0.0005723769,0.001333069,0.0004002991,0.0005520041],"domain_scores_gemma":[0.997079,0.001007856,0.0001734727,0.001083716,0.000475357,0.0001805971],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.0002339233,0.0001916443,0.002070386,0.0003060302,0.0002903482,0.00002979425,0.006372682,0.00007644512,0.009600216,0.7016805,0.004297884,0.2748501],"study_design_scores_gemma":[0.004809762,0.0006818042,0.07894216,0.001569964,0.0004510416,0.0001760429,0.00623243,0.2015244,0.1470061,0.4693842,0.08657146,0.002650644],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04211959,0.01628901,0.8868873,0.04617559,0.0009556171,0.001019517,0.00005581978,0.0008418786,0.00565565],"genre_scores_gemma":[0.9749617,0.005312723,0.009916192,0.006754376,0.0001182846,0.00009269112,0.000002741351,0.00002204843,0.002819262],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9328421,"threshold_uncertainty_score":0.9998401,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01600020813497821,"score_gpt":0.279375130839381,"score_spread":0.2633749227044028,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}