There were more ransomware attacks last month than any other on record

Date:
Thu, 20 Apr 2023 18:11:20 +0000

Description:
Clop leaves its mark on the ransomware world after breaching dozens of firms through GoAnywhere MFT.

FULL STORY ======================================================================

Thanks to the Clop ransomware group and its exploit of a flaw in Fortras GoAnywhere MFT secure file transfer tool, March 2023 was a record-breaking month for ransomware attacks.

New figures from NCC Group claim there had been 459 ransomware attacks recorded in March 2023 - up 91% compared to February, and up 62% compared to the same month in the previous year.

Records were broken mostly because Clop, allegedly a Russian threat actor, discovered a zero-day in GoAnywhere MFT , a secure file transfer tool from Fortra, which was in use by some major corporate names. By abusing the zero-day, now tracked as CVE-2023-0669, the hackers managed to steal data and deploy ransomware on dozens of organizations. Dethroning LockBit 3.0

After leaking data from its first victim, Clop said 130 organizations were compromised, which isnt wide of the mark given NCC Groups assessment of 129 recorded attacks. The researchers said this makes clop the most active ransomware gang for the first time in its operational history.

Clop even managed to dethrone the infamous LockBit 3.0, which conducted 97 attacks in the same timeframe. Other notable mentions for March 2023 include Royal ransomware, BlackCat (AKA ALPHV), Bianlian, Play, Blackbatsa, Stormous, Medusa, and Ransomhouse. Read more

Hitachi Energy confirms data breach after being hit by Clop ransomware

Hatch Bank says 140,000 customers had data stolen after breach

Here's our rundown of the best endpoint protection

Industrials - construction, engineering, transport services, commercial and professional services, and more - were the most popular targets, with 147 (32%) ransomware attacks. Consumer Cyclicals - construction suppliers,
hotels, media, and more - were second-placed, NCC Group said. Other notable mentions include technology, healthcare, financials, and educational
services.

NCC Group also mentions that ransomware operators dont really care who theyre attacking. Every incident is opportunistic, rather than targeted, despite the fact that some industries suffered more than others. Almost half of all attacks (221) happened in North America, with Europe following in
second-place with 126 incidents. Asia rounds off the top three with 59 attacks. These are the best malware removal tools right now

Via: BleepingComputer



======================================================================
Link to news story: https://www.techradar.com/news/there-were-more-ransomware-attacks-last-month-t han-any-other-on-record


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)