Share this article on:
Incidents drop, LockBit remains on top, and Australia finds itself in the top five most attacked countries.
Thankfully, we’ve seen a pretty significant drop from our last seven-day reporting period this week. Total attacks numbered 64, an impressive 31 per cent drop.
While the 30-day and three-month numbers continue to trend down, I’m expecting the weekly numbers to vary considerably. I’m sure some trends will emerge, but different ransomware operators announce their victims – which often appears to be the first time anyone knows, even the impacted company – at different rates.
Some groups announce victims as they’re acquired, so more or less one at a time. Others – whether because they are more prolific or because they prefer to save up victims for a single very bad day – post many at once.
The countries most impacted remained much the same, with one exception. Trigona and 8Base each claimed an antipodean victim, which saw the nation enter the top five in the last few days of January, joining Canada with two attacks each. Otherwise, the top three most attacked countries were the USA, France, and the UK again.
The list of industries impacted was a more protean mix, however. Law firms were the most impacted, taking the top spot from manufacturing, which dropped to second spot – previously held by the legal eagles. Accounting, IT services, and government round out the top five, all suffering three attacks.
The overall number of attacks may have dropped, but once again, LockBit remained responsible for most of them. The ransomware-as-a-service (RaaS) gang claimed 15 victims in the last seven days, a drop from last week’s 20 but still 23 per cent of all ransomware attacks.
8Base, BianLian, and ALPHV were the next most dangerous groups, with eight, seven, and seven attacks, respectively, while Trigona peaked into the top five with five attacks of its own. Following the overall drop in attacks, each operator, like LockBit, was less active during this period.
Just the numbers
Sixty-four attacks in the last seven days, down 31 per cent from last week.
Threat actors
LockBit – 15 ransomware attacks, 23 per cent of total
8Base – 9
BianLian – 7
ALPHV – 5
Trigona – 5
Countries impacted
USA – 35 organisations targeted
France – 4
United Kingdom – 3
Australia – 2
Canada – 2
Industries
Law firms – 6, nine per cent of the total
Manufacturing – 3
Accounting – 3
IT services – 3
Government – 3
A total of 3,705 ransomware findings so far this year and 57 threat groups tracked.
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.