Confronting Ransomware: Analysis and Strategy for the Western Balkans 2–3 December 2025 | Science and Technology Park of Montenegro

02.12.2025

Ransomware continues to pose one of the most serious and persistent cyber threats to institutions and businesses across the Western Balkans. In response to this growing challenge, the Western Balkans Cyber Capacity Centre (WB3C) is hosting a two-day conference that brings together national authorities, law enforcement agencies, EU institutions, the private sector and international experts to examine the evolving threat landscape and identify practical paths forward.

The discussions will follow the structure of the latest published agenda (available below), covering operational, legal, technical and strategic dimensions of ransomware response.

A diverse regional and European expert community

The conference brings together a wide range of contributors, reflecting the cross-sectoral nature of ransomware resilience:

National cybersecurity authorities, CSIRTs and police high-tech crime units from Montenegro, Albania, Bosnia and Herzegovina, Serbia, and North Macedonia
European and international law enforcement institutions, including Europol and France’s Anti-Cybercrime Office (OFAC)
Judicial representatives and prosecutors from France, Serbia, Montenegro and EUROJUST
Private-sector leaders in cybersecurity, including technical experts, CISOs, SOC practitioners and incident-response specialists from across the region and the EU
Academic and research communities specialising in cybercrime, digital forensics and AI-enabled cyber threats

Key themes across the two-day programme

The agenda examines several critical aspects of the ransomware ecosystem:

Mapping current ransomware tactics and regional threat activity
Understanding criminal group structures, operational models and international cooperation needs
Lessons learned from high-profile investigations and successful dismantling of ransomware groups
Comparative legal frameworks and the challenges of jurisdiction, prosecution and evidence handling
Real-world case studies from organisations that have managed and recovered from ransomware attacks
Technical and legal issues surrounding cryptocurrency tracing and seizure
The emerging role of AI in enhancing both attacker capabilities and defensive measures
Operational insights from securing major international events, including Paris 2024
The complexities of negotiating under pressure during active ransomware incidents

Through panels, keynotes, and practitioner-to-practitioner exchanges, the event aims to deepen understanding of how ransomware is evolving, where regional vulnerabilities lie, and what coordinated action is needed to strengthen resilience.

WB3C is committed to strengthening cybersecurity capacity across the Western Balkans by connecting national stakeholders with European expertise and by translating insights into practical improvements for public authorities, critical service operators and the wider digital ecosystem.

Access the latest agenda below.

Downloads:

Ransomware-Conference-Agenda.pdf

Other news and events

Visit to the Administration for Maritime Safety and Port Management

Today, our team Gilles Schwoerer and Maja Miranovic visited the Administration for Maritime Safety and Port Management in Bar, Montenegro, to explore potential cooperation on cybersecurity training, with a particular focus on strengthening the capabilities of their SOC team.

The discussion highlighted the value of a sectoral approach to protecting critical infrastructure, especially in sectors linked to Montenegro’s broader maritime and coastal economy. In the context of NIS2 implementation and the growing need for critical entities to align with international ISO standards, we reviewed priority needs and practical options for tailored capacity-building.

We were welcomed by Nexhat Kapidani, Deputy Director who introduced the team to the Administration’s facilities and operational context. The visit reinforced the potential for the maritime domain to be among the first sectors considered under WB3C’s future sector-focused work on cyber resilience.

WB3C Receives an Appreciation Award from the Association of Security Managers of Montenegro

At a reception hosted by the Association of Security Managers of Montenegro on 15 December 2025, Western Balkans Cyber Capacity Centre (WB3C) was honored with an appreciation plaque presented by the Association’s President, Dragan Radulović, in recognition of our strong and effective cooperation in 2025.

Sincere thanks to Dragan and to the Association for this meaningful acknowledgment.

The reception was attended by our colleagues Gilles Schwoerer and Maja Miranovic, who have already begun working with the Association on the next major event we are developing together. While it is still early to share details, we are focused on building on this momentum and further strengthening our partnership through a major joint cyber initiative currently in preparation.

The Association of Security Managers of Montenegro is a significant professional platform that brings together security professionals from both the public and private sectors across Montenegro (over 120 members) and contributes to strengthening professional standards, security culture and cooperation with institutions and industry.

We look forward to continuing our close cooperation and joining forces in advancing security standards and resilience in Montenegro and the wider region.

Second Cybersecurity Diploma Prep Course Completed

Our second Prep Course cohort (December) led by Ljuban Petrovic just finished two intense weeks of learning, practice and assessment. These ICT students showed up with curiosity and ambition to build their future career in cybersecurity field.

Now, the bigger picture:

We’ve completed two Prep Course cohorts (November + December), with 18 students in total from the Western Balkans. They have already taken the final test, and the final selection will be made in January for the free Cybersecurity University Diploma starting in February 2026, delivered by WB3C in cooperation with the Université de Technologie de Troyes (UTT).

What makes this course unique is that it’s not “just another training.” It’s a real academic pathway that helps students build lasting qualifications and it sits alongside our year round short courses as part of a wider talent strategy.

What this diploma prepares students for (entry roles):
🛡️ Security Administrator
🧠 SOC Analyst (Junior)
🧪 Junior Penetration Tester
🔍 Digital Forensics Technician
✅ Cybersecurity Auditor (Junior)

What happens next:

📝 January: final selection
🎓 February 2026: one-year long diploma course starts

Our cooperation with universities is an investment in long-term cybersecurity workforce development and we have more plans for the future how to make these courses available to more people in the region.