Hacking the Media: The PR Tactics of Cybercriminals

The report analyzes how cybercriminals, particularly ransomware groups, directly and indirectly engage with media and public forums to amplify extortion leverage, cultivate notoriety, and manipulate victim perception, often through exaggerated or fabricated breach claims. It illustrates this trend with examples (DragonForce, Scattered Spider, LockBit, IntelBroker), explains resulting legal and reputational risks, forecasts that generative AI will further enable convincing false narratives, and provides mitigations including integrated incident response planning, coordinated legal/PR communications, verification-first reporting, rapid forensics, and preparedness for AI-enhanced misinformation.