Position Paper: The Extended Pyramid of Pain: The Attacker's Nightmare Edition

Since its introduction in 2013, the Pyramid of Pain has been a fundamental framework for defenders to prevent, detect, and respond to cyber threats. However, as the cyber adversaries continue to evolve, they increasingly adopt stealthy techniques, such as defense evasion and credential theft, rendering traditional cyber defenses less effective. This paper introduces The Extended Pyramid of Pain that moves beyond traditional Tactics, Techniques and Procedures (TTPs) to incorporate preemptive and proactive disruption strategies including targeting the humans behind modern cyber-attacks, dismantling attacker infrastructure, disrupting the attacker economic model and leveraging Psychological Operations (PSYOPs) to introduce uncertainty, fear, and hesitation in the minds of humans behind modern cyber-attacks. By escalating the cost, risk and complexity for attackers, The Extended Pyramid of Pain shifts the advantage to defenders, making cyber-attacks a less viable and more costly endeavor.