Security News > 2024 > August > Six ransomware gangs behind over 50% of 2024 attacks
Of the 53 ransomware groups whose underworld websites, where the crooks name their victims and leak stolen data, that the incident response team monitored, just six accounted for more than half of the total infections observed.
Scorpius is the lucky constellation that Unit 42 connects to ransomware gangs.
Coming in second: the Play gang named 155 victims during 2024 H1, compared to 267 last year.
A relative newcomer from last year that is believed to be a rebrand of Phobos, came in third during the first half of 2024 with 119 claimed victims.
A couple notable gangs absent from this year's list include ALPHV/BlackCat, which came in second last year with 388 victims, and the No. 3-ranked CLOP, with 364 victims in 2023.
A new ransomware strain named Brain Cipher emerged in June 2024 after a crew hacked Indonesia's Temporary National Data Center and disrupting the country's services.
News URL
https://go.theregister.com/feed/www.theregister.com/2024/08/13/lockbit_ransomware_stats/
Related news
- Surge in Magniber ransomware attacks impact home users worldwide (source)
- Keytronic reports losses of over $17 million after ransomware attack (source)
- UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack (source)
- McLaren hospitals disruption linked to INC ransomware attack (source)
- CISA warns of Jenkins RCE bug exploited in ransomware attacks (source)
- CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks (source)
- Most Ransomware Attacks Occur When Security Staff Are Asleep, Study Finds (source)
- Most ransomware attacks occur between 1 a.m. and 5 a.m. (source)
- New Qilin Ransomware Attack Uses VPN Credentials, Steals Chrome Data (source)
- Lateral movement: Clearest sign of unfolding ransomware attack (source)