Halcyon Launches Ransomware Threat Intelligence Bounty Program

Halcyon Launches First-Ever Dedicated Ransomware Threat Intelligence Bounty Program

Halcyon is Committing $250k to a One-of-a-Kind Threat Research Incentive Program Designed to Reward Independent Researchers Who Responsibly Share Ransomware Threat Intelligence

Halcyon announced its new Threat Research Incentive Program, the first-ever dedicated ransomware threat intelligence bounty initiative. With the launch of TRIP, Halcyon is committing $250,000 to reward independent researchers and ransomware hunters for responsibly disclosing threat intelligence on ransomware operations.

Ransomware continues to cripple businesses of all sizes, across every industry. In the first five weeks of 2025 alone, ransomware attacks increased 149% year over year. Across the globe, independent researchers and threat hunters uncover new ransomware samples, attacker infrastructure, and evasion techniques every day, providing critical information in the fight against ransomware. However, much of their work is done for free and often goes unrecognized. TRIP aims to change that.

“It’s simple - our mission is to eradicate ransomware by all means necessary. We are calling on independent researchers and ransomware hunters to join us in our fight to stop attacks,” said Jon Miller, CEO and Co-Founder, Halcyon. “Whether you’re a full-time reverse engineer, OSINT specialist, or passionate about defending others — Halcyon wants to work with you. Together, we will fuel an unstoppable global alliance of defenders focused on defeating ransomware at scale and change the ransomware game.”

TRIP will accelerate anti-ransomware capabilities by sourcing novel intelligence from trusted researchers while rewarding them for their technical contributions to ransomware defense. Researchers who provide valuable intelligence via technical deep-dive write ups and direct SIEM or Dashboard panel access or exports will be rewarded based on a tiered structure:

Tier 1: Novel details on ransomware groups, RaaS platforms, affiliate attackers, initial access brokers, and other key players in ransomware operations will be rewarded up to $10,000 per accepted submission.
Tier 2: Novel details on attacker tooling, infrastructure, evasion techniques, and other TTPs will be rewarded up to $5,000 per accepted submission.
Tier 3: Novel details on droppers, loaders, packers, and other tooling will be rewarded up to $3,000 per accepted submission.
Tier 4: Novel details on indicators of compromise (IOCs) or behavior chains will be rewarded up to $1,000 per accepted submission.

To ensure the quality and success of the program, a dedicated Halcyon team will follow strict guidelines to vet all research contributions before accepting the submission for compensation. Individuals who appear on an OFAC list are not eligible to participate in the program. Additionally, all researchers must affirm sourcing and independent status.

Source: Halcyon media announcement

Accelerate CSP Business with Identity Protection

Follow @PipelineWire