Powered by MOMENTUM MEDIA
cyber daily logo

Breaking news and updates daily. Subscribe to our Newsletter

Breaking news and updates daily. Subscribe to our Newsletter X facebook linkedin Instagram Instagram

The weekly ransomware report, Saturday, 3 February

Incidents drop, LockBit remains on top, and Australia finds itself in the top five most attacked countries.

user icon David Hollingworth
Sat, 03 Feb 2024
The weekly ransomware report, Saturday, 3 February
expand image

Thankfully, we’ve seen a pretty significant drop from our last seven-day reporting period this week. Total attacks numbered 64, an impressive 31 per cent drop.

While the 30-day and three-month numbers continue to trend down, I’m expecting the weekly numbers to vary considerably. I’m sure some trends will emerge, but different ransomware operators announce their victims – which often appears to be the first time anyone knows, even the impacted company – at different rates.

Some groups announce victims as they’re acquired, so more or less one at a time. Others – whether because they are more prolific or because they prefer to save up victims for a single very bad day – post many at once.

============
============

The countries most impacted remained much the same, with one exception. Trigona and 8Base each claimed an antipodean victim, which saw the nation enter the top five in the last few days of January, joining Canada with two attacks each. Otherwise, the top three most attacked countries were the USA, France, and the UK again.

The list of industries impacted was a more protean mix, however. Law firms were the most impacted, taking the top spot from manufacturing, which dropped to second spot – previously held by the legal eagles. Accounting, IT services, and government round out the top five, all suffering three attacks.

The overall number of attacks may have dropped, but once again, LockBit remained responsible for most of them. The ransomware-as-a-service (RaaS) gang claimed 15 victims in the last seven days, a drop from last week’s 20 but still 23 per cent of all ransomware attacks.

8Base, BianLian, and ALPHV were the next most dangerous groups, with eight, seven, and seven attacks, respectively, while Trigona peaked into the top five with five attacks of its own. Following the overall drop in attacks, each operator, like LockBit, was less active during this period.

Just the numbers

Sixty-four attacks in the last seven days, down 31 per cent from last week.

Threat actors

LockBit – 15 ransomware attacks, 23 per cent of total
8Base – 9
BianLian – 7
ALPHV – 5
Trigona – 5

Countries impacted

USA – 35 organisations targeted
France – 4
United Kingdom – 3
Australia – 2
Canada – 2

Industries

Law firms – 6, nine per cent of the total
Manufacturing – 3
Accounting – 3
IT services – 3
Government – 3

A total of 3,705 ransomware findings so far this year and 57 threat groups tracked.

David Hollingworth

David Hollingworth

David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.

cd intro podcast

Introducing Cyber Daily, the new name for Cyber Security Connect

Click here to learn all about it
newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.