Security News > 2024 > August > Six ransomware gangs behind over 50% of 2024 attacks
Of the 53 ransomware groups whose underworld websites, where the crooks name their victims and leak stolen data, that the incident response team monitored, just six accounted for more than half of the total infections observed.
Scorpius is the lucky constellation that Unit 42 connects to ransomware gangs.
Coming in second: the Play gang named 155 victims during 2024 H1, compared to 267 last year.
A relative newcomer from last year that is believed to be a rebrand of Phobos, came in third during the first half of 2024 with 119 claimed victims.
A couple notable gangs absent from this year's list include ALPHV/BlackCat, which came in second last year with 388 victims, and the No. 3-ranked CLOP, with 364 victims in 2023.
A new ransomware strain named Brain Cipher emerged in June 2024 after a crew hacked Indonesia's Temporary National Data Center and disrupting the country's services.
News URL
https://go.theregister.com/feed/www.theregister.com/2024/08/13/lockbit_ransomware_stats/
Related news
- JPCERT shares Windows Event Log tips to detect ransomware attacks (source)
- Ransomware attack forces UMC Health System to divert some patients (source)
- Underground ransomware claims attack on Casio, leaks stolen data (source)
- Casio confirms customer data stolen in a ransomware attack (source)
- Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between (source)
- BianLian ransomware claims attack on Boston Children's Health Physicians (source)
- Microsoft: Ransomware Attacks Growing More Dangerous, Complex (source)
- Tech giant Nidec confirms data breach following ransomware attack (source)
- Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks (source)
- Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks (source)