On the record
Research, Speaking & Media
Original research, books, reporting, and public talks from Arkem Cyber's work on ransomware and the cybercrime economy.
Arkem Cyber’s credibility rests on work that is published, named, and open to scrutiny. The firm’s perspective on ransomware and the cybercrime economy comes from primary-source research — much of it shared publicly through long-form analysis, books, reporting, and talks. This page brings that work together for the buyers, partners, journalists, and event organizers who want to judge it for themselves.

Featured research
Arkem Cyber follows ransomware and extortion groups closely over time — how they organize, how they breach and pressure victims, how they negotiate, and how they adapt when exposed. The aim is not volume but depth: a small body of well-sourced work that holds up to scrutiny and stays useful long after the news cycle moves on.
Selected studies will be listed here as they are confirmed for publication on the site.
Books
Jon DiMaggio writes book-length work on cyberwarfare, ransomware, and organized cybercrime — sustained analysis that connects individual incidents to the larger criminal economy behind them. Titles and where to find them will be listed here.
Ransomware Diaries
The Ransomware Diaries are an ongoing investigative series that examines specific ransomware operations, drawing on sustained study of the groups, their infrastructure, and their public activity to show how these organizations actually function. Entries in the series will be linked here as they are added to the site.
Public reports
Beyond books and the Ransomware Diaries, Arkem Cyber’s work includes detailed public reports and threat-actor analysis written for defenders, executives, and the wider research community. Report titles and links will be listed here as they are confirmed for the site.
Press bio
Jon DiMaggio is the founder and principal researcher of Arkem Cyber, a boutique cybercrime intelligence advisory firm. He is a cybercrime intelligence analyst, author, and speaker whose published research examines how ransomware and extortion groups operate and the criminal economy that sustains them. He works with leaders, journalists, and research partners to make that threat landscape understandable and to inform better decisions about it.
For interviews, commentary, or speaking inquiries, please use the contact page.
Speaking topics

Jon speaks to executive, technical, and general audiences, with talks tailored to the room. Subjects he commonly covers include:
- How modern ransomware and extortion groups actually operate
- The cybercrime economy and the business behind the attacks
- Profiling and tracking specific threat actors over time
- What original intelligence research looks like, and how it is done responsibly
- Helping executives and boards make sound decisions under pressure
Coming soon: Research Notes & Threat Profiles
Shorter-form Research Notes and structured Threat Profiles are in preparation and will be published here in a future release. They will extend this page from a record of past work into an ongoing, openly published body of research.
Media appearances
Media appearances will appear here.
Speaking history
Selected public talks will appear here.
Discuss an engagement
If a decision in front of you would benefit from this kind of research and judgment, the best next step is a conversation.