Security News > 2024 > August > Six ransomware gangs behind over 50% of 2024 attacks
Of the 53 ransomware groups whose underworld websites, where the crooks name their victims and leak stolen data, that the incident response team monitored, just six accounted for more than half of the total infections observed.
Scorpius is the lucky constellation that Unit 42 connects to ransomware gangs.
Coming in second: the Play gang named 155 victims during 2024 H1, compared to 267 last year.
A relative newcomer from last year that is believed to be a rebrand of Phobos, came in third during the first half of 2024 with 119 claimed victims.
A couple notable gangs absent from this year's list include ALPHV/BlackCat, which came in second last year with 388 victims, and the No. 3-ranked CLOP, with 364 victims in 2023.
A new ransomware strain named Brain Cipher emerged in June 2024 after a crew hacked Indonesia's Temporary National Data Center and disrupting the country's services.
News URL
https://go.theregister.com/feed/www.theregister.com/2024/08/13/lockbit_ransomware_stats/
Related news
- Massive PSAUX ransomware attack targets 22,000 CyberPanel instances (source)
- North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack (source)
- North Korean govt hackers linked to Play ransomware attack (source)
- City of Columbus: Data of 500,000 stolen in July ransomware attack (source)
- Columbus, Ohio, confirms 500K people affected by Rhysida ransomware attack (source)
- Critical Veeam RCE bug now used in Frag ransomware attacks (source)
- Halliburton reports $35 million loss after ransomware attack (source)
- New Ymir ransomware partners with RustyStealer in attacks (source)
- New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks (source)
- New 'Helldown' Ransomware Variant Expands Attacks to VMware and Linux Systems (source)