Connect with us


International Ransomware Assaults Attain Document Excessive in 2023, Says Corvus



Spread the love

Regardless of regulation enforcement actions, fourth quarter 2023 ransomware incidents nonetheless surpassed 2022 by practically 70%, and the variety of energetic ransomware teams grew by 34%.

Corvus Insurance coverage just lately launched its Q4 2023 Ransomware Report, that includes information collected from ransomware leak websites. The report exhibits ransomware exercise for the 12 months surpassed 2022 totals by 68%, with a record-setting 4,496 whole leak web site victims, in comparison with 2,670 in 2022 and three,048 in 2021.


Ransomware assaults elevated every of the primary three quarters of 2023 after which declined barely in This fall. Worldwide regulation enforcement exercise in This fall disrupted the ransomware ecosystem, together with taking down ALPHV/BlackCat, one of the crucial prolific ransomware gangs, and eliminating Qakbot, a pervasive household of malware used to realize entry to victims’ networks.

Because of this, This fall assaults dropped by 7% from Q3. Regardless of this sequential quarterly drop, This fall 2023 exercise was nonetheless up 12 months over 12 months, and Qakbot nonetheless accounted for 31% of the entire ransomware quantity for the quarter. In Qakbot’s absence, there was a noticeable shift to different malware strains akin to “Pikabot” and “DarkGate.”


In Q3, the ALPHV/BlackCat ransomware group accounted for practically 1 / 4 of all victims within the authorized business (23.5%). This quantity declined by 8.8% in This fall, possible as a consequence of regulation enforcement disruption in December.

The transportation, logistics and storage business skilled constant will increase all through 2023. Lockbit 3.0 accounted for 22% of victims, whereas ALPHV/BlackCat comprised 15.87%. The business is delicate to enterprise interruption and presents enticing targets to risk actors on the lookout for high-pressure victims.


Energetic ransomware teams elevated by 34% between Q1 and This fall 2023 as well-known ransomware teams fractured and leaked proprietary encryptors on the darkish net. Members of bigger defunct teams started forming splinter teams, and leaks spawned new ransomware operations.

“All through 2024, we’ll undoubtedly witness a lot of the identical exercise, as criminals proceed to assault, shift, re-brand, and strike once more,” mentioned Jason Rebholz, CISO, Corvus Insurance coverage. “Companies ought to stay ready with enhanced safety controls and cyber insurance coverage insurance policies to assist decrease threat.”


Corvus Insurance coverage, now a completely owned subsidiary of The Vacationers Corporations, Inc., is headquartered in Boston, Massachusetts. Corvus offers specialty insurance coverage merchandise enabled by information science, together with Good Cyber Insurance coverage and Good Tech E+O, amongst different merchandise and digital instruments.



Involved in Cyber?

Get computerized alerts for this subject.

Click to comment

Leave a Reply

Your email address will not be published.