Ransomware payments are falling as victims refuse to pay up

Date:
Fri, 29 Jul 2022 12:24:51 +0000

Description:
Those that do pay up, pay more, but still end up without their data.

FULL STORY ======================================================================

Its getting harder for ransomware operators to get the victims to pay up, but once they do - they pay more than they did a year ago.

A new report from Coveware claims that although the number of payments dropped, the value of the payments made rose.

It found the average ransom payment for the second quarter of the year was $228,125, up 8% compared to the quarter before. At the same time, the median ransom payment was just $36,360, which is a drop of more than half (51%), compared to Q1. Targeting smaller firms

This change doesn't appear to be a one-off, but a trend that started in the fourth quarter of 2021, when payments were at their highest (average was $332,168, and median was $117,116).

This trend reflects the shift of RaaS affiliates and developers towards the mid-market where the risk to reward profile of attack is more consistent and less risky than high profile attacks, the report reads.

We have also seen an encouraging trend among large organizations refusing to consider negotiations when ransomware groups demand impossibly high ransom amounts.

The change could also be due to the fact that ransomware operators set their sights on a different kind of business. Theyre now targeting smaller, but financially stable organizations, Coveware added. When it comes to most
active families, there had been no significant changes, with BlackCat still topping the list with 16.9% of all known attacks. With 13.1%, LockBit was second. Read more

One of the most dastardly ransomware strains has received a Rust-flavored

upgrade

Ransomware actors have found a new way to make victims pay up

Here's the best endpoint protection software around

Their tactics have not changed much, either, as double extortion attacks (encryption + data theft and the threat of leaks), being the most popular method. Almost all incidents (88%) included both data encryption and theft.

Coveware also reiterated what experts have been saying all this time - paying does not pay, as in many cases, threat actors continued the extortion, or leaked the stolen files despite being paid.

The average downtime that came as a result of ransomware attacks dropped by 8%, to 24 days, compared to Q1. Keep your devices secure from malware with
the best malware removal software right now

Via: BleepingComputer



======================================================================
Link to news story: https://www.techradar.com/news/ransomware-payments-are-falling-as-victims-refu se-to-pay-up/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)