Akamai Technologies, Inc., the cloud company that powers and protects life online, released a new State of the Internet report that spotlights the evolving ransomware landscape. Ransomware on the Move: Exploitation Techniques and the Active Pursuit of Zero-Days finds that the use of Zero-Day and One-Day vulnerabilities has led to a 143% increase in total ransomware victims between Q1 2022 and Q1 2023.The report also found that ransomware groups increasingly target the exfiltration of files, the unauthorized extraction or transfer of sensitive information, which has become the primary source of extortion.This new tactic indicates file backup solutions are no longer a sufficient strategy to protect against ransomware.
According to the report, adversaries are evolving their methods and techniques from phishing to put a greater emphasis on vulnerability abuse. As these adversaries shift tactics, LockBit has dominated the ransomware landscape, from Q4 2021 to Q2 2023, with 39% of total victims – more than triple the number of victims of the second-highest ranked ransomware group.Further analysis shows that the CL0P ransomware group is aggressively developing Zero-Day vulnerabilities, growing its victims by 9x year over year.
CIO INFLUENCE: Nextira Selected by Ansys Technology Partner Program to Support Customers Implementing Ansys Gateway Powered by AWS
Of all vertical industries, manufacturing saw a 42% increase in total victims between Q4 2021 and Q4 2022, underscoring the potential threat to global supply chains. LockBit was responsible for 41% of overall manufacturing attacks. The healthcare vertical saw a 39% increase in victims during the same period, and was targeted primarily by the ALPHV (also known as BlackCat) and LockBit ransomware groups.
Other key findings of Ransomware on the Move: Exploitation Techniques and the Active Pursuit of Zero-Days include:
- Organizations with reported revenue of up to $50 m************** were the most at risk of being targeted (65%) while organizations with reported revenue above $500 m************** made up 12% of total victims
- Victims of multiple ransomware attacks were more than 6x more likely to experience the second attack within three months of the first attack
- Financial services organizations saw an increase of 50% in the total number of impacted organizations year over year while the retail vertical ranks third in the number of ransomware victims per industry and saw a 9% increase
“Adversaries behind ransomware attacks continue to evolve their techniques and strategies striking at the heart of organizations by exfiltrating their critical and sensitive information,” said Pavel Gurvich, Senior Vice President and General Manager, Enterprise Security at Akamai. “It’s critical that organizations understand the techniques and tools deployed by adversaries in order to shield their critical assets, preserve trust in their brand and ensure business continuity.”
CIO INFLUENCE: CIO Influence Interview with Pete Lilley, Vice President and GM at Instaclustr
[To share your insights with us, please write to sghosh@martechseries.com]
