Paperback
Hackers, ex-criminals, journalists: inside the ransomware war’s front lines.
Pre-Order

Owned

The FBI Had Rules. We Didn't.

$53.45

  • Paperback

    200 pages

  • Release Date

    2 February 2027

Check Delivery Options

Summary

True crime with technical credibility: the secret collective of hackers, ex-criminals, investigators, and journalists who’ve spent years fighting ransomware from the inside finally tell their stories, with real DMs from gang operators, screenshots of dark web forum conversations, and a complete ransom negotiation walkthrough.

Anchored by Jon DiMaggio’s account of infiltrating LockBit and the FBI call warning him the gang had put a target on his back, this cybersecurity expose is testi…

Book Details

ISBN-13:9781718505490
ISBN-10:1718505493
Author:Jon DiMaggio, The Ransomware Gang
Publisher:No Starch Press,US
Imprint:No Starch Press,US
Format:Paperback
Number of Pages:200
Release Date:2 February 2027
Weight:369g
Dimensions:152mm x 229mm
A-Format
B-Format
Owned by Jon DiMaggio - ISBN: 9781718505490
152 × 229 mm
C-Format
A4
mm / in
About The Author

Jon DiMaggio

Jon DiMaggio

Jon DiMaggio is the founder and CEO of Arkem Cyber and one of the industry’s leading investigators of ransomware and cybercrime. A former US intelligence analyst, he has spent more than twenty years tracking cybercriminals and uncovering the human stories behind some of the world’s most notorious cyberattacks. His investigations have taken him deep inside ransomware ecosystems, where he has communicated directly with threat actors and supported efforts that contributed to major law enforcement actions. His acclaimed “Ransomware Diaries” series offered an unprecedented look inside modern cybercrime. Jon is the author of The Art of Cyberwarfare (No Starch Press, 2022), a two-time SANS Difference Makers Award winner, and a frequent speaker at DEF CON, RSA Conference, and Black Hat. His work has been featured on 60 Minutes and Bloomberg, as well as in The New York Times and WIRED.

Allan Liska

Allan Liska is a senior security architect and ransomware specialist at Recorded Future, with more than thirty years of experience in information security and a decade researching ransomware. He advises major global corporations and government agencies on ransomware response, sits on national ransomware task forces, and speaks at conferences worldwide. Over his career, he has worked as a security practitioner and ethical hacker at Symantec, iSIGHT Partners, FireEye, and Recorded Future. A leading voice on ransomware and threat intelligence, he is regularly cited in The Washington Post, The New York Times, and WIRED, as well as on Bloomberg and NBC News. He is also the author of numerous books, including Ransomware: Defending Against Digital Extortion (O’Reilly, 2016).

Azim Khodjibaev

Azim Khodjibaev is a senior cyber threat researcher and intelligence analyst on Cisco Talos’s Threat Intelligence and Interdiction team, with more than fifteen years’ experience in the intelligence field. A native Russian speaker and regional expert, he specializes in tracking and analyzing cybercrime, disinformation campaigns, APT activity, and ransomware groups. He was among the first researchers to focus on LockBit ransomware and has worked closely with partners to help identify wanted cybercriminals and ransomware operators, including Mikhail Matveev (Wazawaka), Ivan Kondratiev (Bassterlord), and Arkady Yakovlev (dydka). His research has been featured on the Talos Takes podcast and presented at conferences including RSAC, SLEUTHCON, and BSides.

Will Thomas

Will Thomas is a senior threat intelligence advisor at Team Cymru, with over nine years of experience in cybersecurity. He created the threat hunting program at Equinix, the world’s largest data center company, and previously delivered threat intelligence to UK banks and police as an analyst at Cyjax. He is a coauthor of the SANS FOR589 course, a cofounder of the CTI trust group Curated Intelligence, leader of Bournemouth 2600, and an organizer of BSides Bournemouth. Known online as “BushidoToken,” he has written more than a hundred blog posts on cyber threat intelligence.

Dmitry Smilyanets

Dmitry Smilyanets is senior director of product management at Recorded Future, where he leads the development of intelligence solutions spanning malware, identity, ransomware victimology, and dark web collections. He brings twenty-five years of experience in cybersecurity, cybercrime, and cyber threat intelligence to the role, drawing on an unusual background as a former member of an elite Russian-based hacking organization. Combining that perspective with expertise in social engineering, data analysis, and product strategy, he helps clients across the public and private sectors anticipate, detect, and respond to cyberattacks. Dmitry is the author of numerous publications on cybercrime and threat intelligence, a frequent speaker at events including Black Hat and RSAC, and host of The Wall Street Journal podcast Hack Me If You Can.

Valery Rie

Valery Rie is cofounder and editor-in chief of LeMagIT, a French B2B IT online media outlet. A computer scientist by training and an IT journalist for nearly thirty years, he specializes in cybersecurity and has developed a deeply investigative approach to studying cyberattacks and the dynamics of cybercrime. In 2023 he launched the ransomch.at project, which now hosts more than two hundred redacted real-world negotiations involving over twenty ransomware brands. His work has been cited by Mikko Hypp nen in his RSA Conference 2024 keynote and used as a foundation by researchers at Analyst1 and Lorraine University. His investigations revealed that LockBit was only pretending to remain active after Operation Cronos and uncovered the identity of the longtime actor “tramp” tied to Conti and Black Basta. He also coined the concept of cross-claims, showing how threat actors use ransomware-as-a-service brands to obscure their true structure.

Kurtis Minder

Kurtis Minder is the founder of GroupSense, a leading provider of digital risk solutions, where he built a cyber reconnaissance operation protecting some of the world’s largest enterprises and government organizations. A recognized expert in ransomware response, he has served as lead negotiator in some of the largest ransomware, breach, and data extortion cases globally. Having exited GroupSense in 2025, he now consults for cybersecurity companies and serves as a cyber board advisor, and he leads RAPIDS, a Colorado initiative using technology and data collaboration to manage the health of the Colorado River. His work has been featured in The New Yorker, Fortune, VICE, and WIRED, and on CNN and Good Morning America. His book Cyber Recon: My Life in Cyber Espionage and Ransomware Negotiation (Wiley, 2025) is an expose of the private cyber espionage industry.

Jacqueline Burns Koven

Jacqueline Burns Koven is head of cyber threat intelligence at Chainalysis, where she leads the team tracking the nation-state and criminal actors who scam, steal, and extort cryptocurrency. She coordinates global research and partnerships with task forces including the Ransomware Task Force and the International Counter Ransomware Initiative and has testified before the Senate Homeland Security and Governmental Affairs Committee, the Senate Committee on Aging, and twice before the House Financial Services Committee. Her insights are frequently featured in The Economist and WIRED, as well as on CNBC, Bloomberg, and NPR, and she is a regular keynote speaker at conferences such as RSA and the SANS DFIR Summit. Before joining Chainalysis, she served in the US Intelligence Community and earned a master’s in public administration from Columbia University.

Returns

This item is eligible for free returns within 30 days of delivery. See our returns policy for further details.