Ransomware now accounts for 69% of all attacks that use malware

Image: Getty Images/iStockphoto

Ransomware attacks person deed "stratospheric" levels, according to a report released Wednesday by cybersecurity steadfast Positive Technologies. In the 2nd 4th of 2021, ransomware accounted for 69% of each attacks involving malware, a 30% leap from the aforesaid 4th successful 2020. The astir fashionable targets for ransomware were governmental, aesculapian and concern companies on with scientific and acquisition institutions.

SEE: Ransomware: A cheat expanse for professionals (TechRepublic)  

The wide percent of attacks against authorities agencies climbed to 20% successful the 2nd 4th from 12% successful the archetypal quarter. Ransomware distributors were progressive successful 73% of each of these malware-related attacks. Tomiris, a caller malware loader discovered by Positive Technologies, was capable to nonstop encrypted accusation astir a victimized machine to a server controlled by the attacker.

For the quarter, the concern assemblage was progressive successful 80% of wide malware attacks. Citing 1 circumstantial incident, Positive Technologies said it recovered a caller benignant of distant medication instrumentality (RAT) called B-JDUN, which was utilized to people an vigor company.

Ransomware attacks by industry.

Image: Positive Technologies

But ransomware purveyors besides targeted individuals, with NitroRansomware 1 example. In this benignant of attack, the criminals deploy malware masquerading arsenic a instrumentality for generating escaped acquisition codes for Nitro, an add-on for Discord, a community-based chat app. After launching, the malware gathers information via the browser and past encrypts files connected the user's computer. To person a instrumentality to decrypt the files, the unfortunate indispensable bargain a acquisition codification for activating Nitro and springiness it to the criminals.

The measurement of ransomware attacks had already been surging successful April. But successful aboriginal May, attacks targeted Colonial Pipeline and the police section of the District of Columbia. Such attacks revealed the boldness and audacity of today's ransomware gangs. But they besides triggered unwanted publicity, catching the attraction of instrumentality enforcement agencies and yet the U.S. government, starring to efforts to ace down connected ransomware attacks.

As a result, cybercriminals person since started to alteration their methods, relying little connected partners to transportation retired attacks and much intimately supervising their distributors. Some person besides vowed to permission unsocial definite industries, specified arsenic those progressive successful captious operations oregon infrastructure.

As a effect of the atrocious publicity and instrumentality enforcement efforts, disputes person flared up connected Dark Web forums questioning the quality of ransomware. Several forums person since banned posts related to ransomware spouse programs. Some forum users person adjacent said that ransomware gangs should halt what they're doing and find a antithetic mode to marque money.

Does this mean that ransomware operators volition crook a caller leafage and spot the mistake of their ways? Hardly, according to Positive Technologies.

"We deliberation that ransomware operators liable for high-profile attacks volition find it hard to discontinue specified a profitable business, and volition alternatively hold for things to stroke implicit earlier processing a caller concept," the steadfast said successful its report.

With ransomware apt to stay a threat, Positive Technologies offers several tips connected however organizations tin support themselves.

• Install information updates. Be definite to instal information updates successful a timely manner.
• Fully analyse immoderate large attack. Conduct thorough investigations of each large incidents to observe the points of compromise and uncover immoderate vulnerabilities exploited by the attackers. Further, marque definite the hackers didn't permission down immoderate backdoors for themselves to return.
• Beef up perimeter security. You tin fortify information astatine the firm perimeter by utilizing modern information tools, specified arsenic web exertion firewalls for protecting web resources. To forestall malware infections, usage sandboxes that analyse record behaviour successful a virtual situation arsenic a mode to find malicious activity.

Also see

• Ransomware: What IT pros request to cognize (free PDF) (TechRepublic)
• Ransomware attackers are present utilizing triple extortion tactics (TechRepublic)
• How to forestall different Colonial Pipeline ransomware attack (TechRepublic)
• SolarWinds attack: Cybersecurity experts stock lessons learned and however to support your business (TechRepublic)
• How to go a cybersecurity pro: A cheat sheet (TechRepublic)
• Hiring Kit: Cybersecurity Engineer (TechRepublic Premium)
• Cybersecurity and cyberwar: More must-read coverage (TechRepublic connected Flipboard)