Security News > 2023 > October > Most dual ransomware attacks occur within 48 hours

Since July 2023, the Federal Bureau of Investigation has noticed a new trend: dual ransomware attacks on the same victim, occurring in close proximity of one another.
Dual ransomware attacks are when attacks against the same victim occurr within 10 days of each other.
"This use of dual ransomware variants resulted in a combination of data encryption, exfiltration, and financial losses from ransom payments. Second ransomware attacks against an already compromised system could significantly harm victim entities."
Ransomware attacks involving multiple ransomware strains are now a wholly new occurrence.
Sophos researchers recently shared details about a triple ransomware attack against an automotive supplier, in which attackers took advantage of the same misconfiguration.
More recently, attackers used 3AM ransomware as a fallback in case LockBit - the primary ransomware - gets flagged and blocked by security solutions.
News URL
https://www.helpnetsecurity.com/2023/10/02/dual-ransomware-attacks/
Related news
- Qilin ransomware claims attack at Lee Enterprises, leaks stolen data (source)
- Ransomware gangs exploit Paragon Partition Manager bug in BYOVD attacks (source)
- Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks (source)
- Hunters International ransomware claims attack on Tata Technologies (source)
- Toronto Zoo shares update on last year's ransomware attack (source)
- Ransomware gang creates tool to automate VPN brute-force attacks (source)
- SANS Institute Warns of Novel Cloud-Native Ransomware Attacks (source)
- ⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More (source)
- BlackLock ransomware claims nearly 50 attacks in two months (source)
- TechRepublic EXCLUSIVE: New Ransomware Attacks are Getting More Personal as Hackers ‘Apply Psychological Pressure” (source)