Ethical Hacking News
Halcyon has launched its Threat Research Incentive Program (TRIP), a bug bounty program aimed at rewarding ransomware intel submissions. Researchers can earn up to $10,000 per report for valuable intelligence on ransomware groups, platforms, affiliates, and other key players in the ransomware ecosystem.
Ransomware is a growing concern for organizations and individuals. Halcyon's Threat Research Incentive Program (TRIP) offers payouts up to $10,000 per report for ransomware intel submissions. The goal of TRIP is to eradicate ransomware by tapping into the expertise of the threat hunting community. TRIP has four tiers with increasing payout amounts based on the level of information provided. Halcyon will use most of the submitted intel to improve its anti-ransomware engine, rather than making it publicly available.
Ransomware has become a growing concern for organizations and individuals alike. The malicious software is designed to encrypt a victim's files and demand a ransom in exchange for the decryption key. However, some researchers have been working tirelessly to combat this threat by identifying vulnerabilities in ransomware attacks.
In response to the growing need for effective solutions against ransomware, Halcyon has launched its Threat Research Incentive Program (TRIP), a bug bounty program aimed at rewarding ransomware intel submissions. The program promises payouts of up to $10,000 per report for researchers who submit valuable intelligence on ransomware groups, platforms, affiliates, and other key players in the ransomware ecosystem.
According to Steve Salinas, a senior director of product marketing at Halcyon, the goal of TRIP is to eradicate ransomware. "It is the most damaging type of attack," he said. "Not only does it bring organizations to a grinding halt, but in the absolute worst case, it could mean that they can no longer continue their business." By rewarding researchers for their efforts, Halcyon hopes to tap into the expertise of the ransomware threat hunting community and accelerate the development of effective solutions against this growing threat.
TRIP has four tiers, with Tier 1 submissions earning researchers up to $10,000 per report. This includes new details on ransomware groups, platforms, affiliates, and other key players in ransomware operations. Tier 2 submissions pay out up to $5,000, while Tier 3-level reports can earn up to $3,000. Finally, Tier 4 submissions on indicators of compromise or groups' behavior chains are worth up to $1,000 per report accepted.
It's worth noting that Halcyon is not entirely altruistic in its approach. The bulk of the ransomware intel being submitted will be used to improve Halcyon's anti-ransomware engine, rather than automatically ending up in a publicly available database for all network defenders to freely access. According to Salinas, this approach allows Halcyon to ensure that the research is vetted and incorporated into its technology and services, ultimately helping to protect customers from ransomware attacks.
When asked why Halcyon chose not to open source all of the submissions, Salinas explained that some intel could potentially identify the victim, which would be shared only if deemed necessary. Additionally, sharing sensitive information with threat actors could allow them to adjust their tactics, techniques, and procedures (TTPs), thereby hindering further investigation, detection, and mitigation for victims.
The TRIP program is a significant step forward in the fight against ransomware. By rewarding researchers for their efforts and providing a clear structure for submitting valuable intelligence, Halcyon aims to accelerate the development of effective solutions against this growing threat. As the battle against ransomware continues to intensify, it will be essential to tap into the expertise of the ransomware threat hunting community and work together to protect organizations and individuals from this damaging type of attack.
Related Information:
https://www.ethicalhackingnews.com/articles/Ransomware-Hunters-to-Be-Rewarded-Up-to-10000-per-Report-as-Halcyon-Launches-Bug-Bounty-Program-ehn.shtml
https://go.theregister.com/feed/www.theregister.com/2025/04/22/security_researchers_can_earn_250k/
https://www.theregister.com/2025/04/22/security_researchers_can_earn_250k/
https://www.msn.com/en-us/money/companies/a-pot-of-250k-is-now-available-to-ransomware-researchers-but-it-feeds-a-commercial-product/ar-AA1DoXNy
Published: Tue Apr 22 12:57:37 2025 by llama3.2 3B Q4_K_M
