ENISA Threat Landscape for Ransomware Attacks Report

guest · Jul 30, 2022

July 30, 2022

Ransomware has become one of the most dangerous threats for organizations worldwide. Cybercriminal organizations and ransomware gangs have devised new business models that are attracting a broad range of advanced threat actors. It is quite easy today for cybercrime groups to launch a cyber attack benefitting from the Ransomware-as-a-Service model causing damages of any size.
Click to expand...

The ENISA THREAT LANDSCAPE FOR RANSOMWARE ATTACKS report aims to bring new insights into the reality of ransomware incidents through mapping and studying ransomware incidents from May 2021 to June 2022. The findings are worrisome.
Ransomware operations continue to evolve and are becoming more efficient and causing more devastating attacks. The double-extortion model could expose the most private information of targeted entities on the Internet to the highest bidder.

The report includes recommendations to increase resilience against ransomware attacks and respond to this threat, enjoy it!
Click to expand...

ENISA Threat Landscape for Ransomware Attacks
(PDF): https://www.enisa.europa.eu/publications/enisa-threat-landscape-for-ransomware-attacks/@@download/fullReport

The main highlights of the report include the following:
• A novel LEDS matrix (Lock, Encrypt, Delete, Steal) that accurately maps ransomware capabilities based on the actions performed and assets targeted
• A detailed and in-depth analysis of the ransomware life cycle: initial access, execution, action on objectives, blackmail, and ransom negotiation
• Collection and in-depth analysis of 623 ransomware incidents from May 2021 to June 2022
• More than 10 terabytes of data stolen monthly by ransomware from targeted organisations
• Approximately 58.2% of all the stolen data contains GDPR personal data based on this analysis
• In 95.3% of the incidents it is not known how threat actors obtained initial access into the target organisation
• It is estimated that more than 60% of affected organisations may have paid ransom demands
• At least 47 unique ransomware threat actors were found.
Click to expand...

guest · Aug 3, 2022

Reported ransomware attacks are just the tip of the iceberg. That's a problem for everyone
Shame or just trying to avoid bad publicity means there's very little useful data recorded on ransomware attacks.
August 2, 2022

The level of reported ransomware incidents doesn't paint an accurate picture of what's really going on, as many victims remain unwilling to talk about what happened, the European Union's cybersecurity agency has warned.

Following an analysis of 623 ransomware incidents between May 2021 and June 2022, the ENISA threat landscape report for ransomware attacks warns that "the findings are grim" as ransomware becomes more efficient and is causing more devastating attacks.
But very few victims ever talk about what happened, with ENISA noting "publicly reported incidents are only the tip of the iceberg".
Click to expand...

According to ENISA, it wasn't possible to confirm whether a ransom was paid in 94.2% of all the incidents they analysed, something that the agency says "limits our understanding and thus our ability to perform a proper analysis and mitigate the threat of ransomware".

That leads to a lack of reliable data when it comes to painting a true picture about the state of ransomware attacks.

"The lack of reliable data from targeted organisations makes it very hard to fully understand the problem or even know how many ransomware cases there are," warns the report, which suggests the most reliable sources for finding out who has been a victim of a ransomware attack are the leak sites of cyber-criminal ransomware groups who publish data stolen in the attack.
Click to expand...

ENISA: Ransomware: Publicly Reported Incidents are only the tip of the iceberg

The threat landscape report on ransomware attacks published today by the European Union Agency for Cybersecurity (ENISA) uncovers the shortcomings of the current reporting mechanisms across the EU.
Click to expand...

hawki · Aug 18, 2022

"Ransomware variants almost double in six months...

In the past six months, FortiGuard Labs has seen a total of 10,666 ransomware variants, compared to just 5,400 in the previous half year..."

https://betanews.com/2022/08/18/ransomware-variants-almost-double-in-six-months/

guest · Aug 24, 2022

Ransomware Surges to 1.2 Million Attacks Per Month
August 24, 2022

Barracuda Networks claimed in a new report out today that education, municipalities, healthcare, infrastructure and finance have remained the top five targets for ransomware over the past 12 months.

However, while attacks on local government increased only slightly, those targeting educational institutions more than doubled, and attacks on the healthcare and financial verticals tripled.
Overall, Barracuda claimed that ransomware detections between January and June of this year climbed to more than 1.2 million per month.
Click to expand...

Fleming Shi, CTO at Barracuda, argued that small businesses need to be as alert as their larger counterparts because they are often targeted in stepping-stone attacks.

“As a result, it is essential for security providers to create products that are easy to use and implement, regardless of a company's size,” he added. “Additionally, sophisticated security technologies should be available as services, so that businesses of all sizes can protect themselves against these ever-changing threats.”
Click to expand...

Barracuda: Threat Spotlight: The untold stories of ransomware

Ransomware continues to be a threat to businesses of all sizes in a year dominated by geo-political uncertainty and chaos. 2022 [...] the goal of many high-profile cyberattacks has turned from pure financial gain for the attackers to a desire to cause as much disruption and damage as possible.

Our researchers analyzed 106 highly publicized ransomware attacks between August 2021 and July 2022 and found an increase in attacks across all of the most targeted industries, with attacks on critical infrastructure in particular quadrupling.
Beyond these large attacks that make headlines, though, there are many more small businesses quietly struggling with ransomware and trying to recover after successful attacks.
Click to expand...

guest · Sep 3, 2022

Ransomware attacks jump as new malware strains proliferate, research finds
By AJ Vicens - August 24, 2022

Ransomware cases jumped 47 percent amid a rise in attacks involving newer strains of malicious software infecting targets, according to the cybersecurity firm NCC Group.

Reported incidents increased to 198 in July from 135 in June, according to the firm that issues semi-regular reports on ransomware activity by tracking websites that post victims’ details.
Click to expand...

LockBit was associated with 62 incidents in July, according to NCC Group, nearly 20 percent higher than its June total of 52 known incidents. LockBit remains “the most threatening ransomware group, and with which all ogranisations should aim to be aware of,” the company wrote.
Hive and BlackBasta are following LockBit in the number of reported attacks.

Ransomware groups are made up of a core group of developers working with affiliates, with some splinter outfits working with multiple groups at a time.
Click to expand...

NCC Group: NCC Group Monthly Threat Pulse - July 2022

Ransomware attacks increased by 47% compared to June

Industrials (32%), Consumer Cyclicals (17%), and Technology (14%) remain most targeted sectors

Lockbit 3.0 (52 victims) most active attacker, followed by Hiveleaks (27 victims) and BlackBasta (24 victims)

Click to expand...

guest · Sep 3, 2022

Global Ransomware Damages to Exceed $30bn by 2023
By Kevin Poireault, Reporter, Infosecurity Magazine - August 29, 2022

Nearly half of breaches during the first six months of 2022 involved stolen credentials, Switzerland-based cybersecurity company Acronis reported in its Mid-Year Cyberthreat Report, published on August 24, 2022.

It will come as no surprise to learn that the cybercriminals’ prime goal in using these credentials is to launch ransomware attacks, which “continue to be the number one threat to large and medium-sized businesses, including government organizations,” the report added.
Click to expand...

To extract these credentials, the attackers mainly use phishing techniques, with 600 malicious email campaigns that made their way across the internet in the first half of 2022, of which 58% of the emails were phishing attempts and 28% featured malware, found Acronis.

“Ransomware is worsening, even more so than we predicted,” warns the Swiss firm, mentioning Conti and Lapsus gangs as the prime targets for international security services and expecting global ransomware damages to exceed $30bn by 2023.
Click to expand...

Acronis Cyberthreats Report: Ransomware dominates the threat landscape

Here’s a quick overview of some key trends we’ve observed in the first half of 2022:
1) Ransomware groups are wreaking havoc globally
In our previous report, we predicted that ransomware would continue to dominate the cyberthreat landscape into 2022. Not only did this turn out to be true, it may have been an understatement.
Major ransomware events of 2022 so far have included:

A series of cyberattacks by the Conti gang against government services in Costa Rica, forcing shutdowns and prompting President Rodrigo Chaves to declare a national emergency.

Several headline-generating attacks against major international tech corporations from the Lapsus$ gang — many members of which were teenagers.

The release of LockBit 3.0, which included the first official ransomware bug bounty program — a popular tactic among legitimate developers for rapidly improving software security and effectiveness.

Click to expand...

Acronis Mid-Year Cyberthreat Report
(PDF): https://dl.acronis.com/u/rc/White-Paper-Acronis-Cyber-Protect-Cloud-Cyberthreats-Report-Mid-year-2022-EN-US-220811.pdf

Log in or Sign up

ENISA Threat Landscape for Ransomware Attacks Report

guest Guest

guest Guest

hawki Registered Member

guest Guest

guest Guest

guest Guest

Log in or Sign up

ENISA Threat Landscape for Ransomware Attacks Report

guest Guest

guest Guest

hawki Registered Member

guest Guest

guest Guest

guest Guest

Useful Searches