Cybercrime Intelligence Advisory
About Arkem Cyber
A boutique cybercrime intelligence advisory firm. Original research. Adversary understanding. Intelligence that supports real decisions.
Arkem Cyber is a boutique cybercrime intelligence advisory firm. It helps security leaders, executives, boards, and trusted partners understand cybercrime threats: the actors behind them, the decisions they force, and the intelligence needed to respond to them clearly.
The work is grounded in original research and direct study of adversaries. Not threat feed aggregation. Not compliance frameworks. Not managed security.
Cybercrime intelligence built on understanding the people, motivations, and behavior behind ransomware operations and cybercrime ecosystems.
Why Arkem Exists
Most organizations facing serious cybercrime threats have access to plenty of data. They have security tools, vendor feeds, internal teams, and threat intelligence subscriptions. What they often lack is the adversary understanding needed to make that data useful: someone who can answer not just what happened, but who did it, why they did it, how they typically behave, and what that means for this organization, right now.
Cybercriminals are people. They have motivations, relationships, patterns, and decision-making logic that can be studied, understood, and anticipated. Intelligence built on that understanding is different in kind from intelligence built on log aggregation or automated indicator scoring. It is more specific, more decision-ready, and more useful to the leaders who have to act on it.
Arkem was built to provide that intelligence, and to make it available to the organizations, security leaders, and partners who need it most.
What Arkem Does and Does Not Do
Arkem provides cybercrime intelligence advisory, original threat actor research, executive and board education, incident decision support, and research partnerships for organizations that need credible adversary-focused intelligence in structured, decision-ready formats.
Arkem is not an incident response firm, a managed security provider, a compliance consultancy, a digital forensics provider, a ransomware negotiation company, or a vCISO or staff augmentation business. It is a specialist advisory firm with a defined scope, and that scope is intentional.
Founder & Principal Researcher
Jon DiMaggio
Jon DiMaggio has spent his career investigating ransomware groups, studying cybercriminal behavior, and producing original research on cybercrime ecosystems. His approach draws on intelligence tradecraft developed over years of adversary research: the kind of work that goes beyond technical indicators to understand who the adversary is, what they want, how they operate, and why.
That research has informed security leaders navigating serious cybercrime threats, shaped how government and law enforcement stakeholders understand ransomware operations, and reached some of the largest audiences covering cybercrime in the world. Jon has presented his work at the industry's most respected security conferences, contributed to major international media productions, and authored research that remains among the most detailed publicly available on specific ransomware actors and cybercrime ecosystems.
The ability to take that depth of adversary knowledge and translate it into clear, credible guidance — for a CISO preparing to brief a board, an executive team assessing risk after a near-incident, or a security vendor building a research-backed content program — is the foundation Arkem Cyber was built on.
Publications
- Book The Art of Cyberwarfare
- Book OWNED
- Research Series Ransomware Diaries
Recognition
Award — 2022 & 2023
SANS Difference Makers Award
Two-time recipient of the SANS Difference Makers Award, recognizing outstanding contributions to the information security community through research and education.
View award →How Arkem Works
Arkem takes on a limited number of engagements at any one time. That is not a constraint. It is a design choice. The depth and quality of the work depends on it.
Every engagement begins with a conversation about the specific situation, stakeholders, and objectives. Scope is determined by what the client actually needs, not by a catalog of predefined packages. If Arkem is the right fit, a proposal follows. If it is not, that is determined early.
The first step is reaching out.