According to a new report from security firm Positive Technologies, ransomware attacks have increased significantly and are the leading form of malware cyberattack in recent times. In the second quarter of 2021, ransomware accounted for 69% of all attacks using malware (30% more than in the same quarter of 2020). The most popular targets of ransomware gangs were government, medical services, industries, scientific and educational institutions.
The overall rate of attacks against government organizations increased to 20% in the second quarter, up from 12% in the first quarter.
During the second quarter, the industrial sector was involved in 80% of all malware attacks. Citing a specific incident, Positive Technologies said it found a new type of remote administration tool (RAT) called B-JDUN, which was used to target an energy company.
See also: Windows MSHTML bug: Ransomware groups exploit the flaw
But ransomware gangs also targeted individual users, not just organizations. One ransomware used in such attacks was the Nitro Ransomware. In this type of attack, criminals use malware disguised as a tool to generate free gift codes for Nitro, an add-on for Discord. Once installed, the malware collects data via browser and then encrypts files on the user’s computer.
See also: Marketron: BlackMatter ransomware targeted software provider
Ransomware attacks had already been on the rise since April. But some of the biggest attacks, such as those that hit Colonial Pipeline and the District of Columbia Police Department, began in May. These attacks, along with others targeting large companies, reveal the audacity of today’s ransomware gangs. However, these attacks also generated unwanted publicity and attracted the attention of law enforcement agencies, as well as the U.S. government. As a result, efforts to crack down on ransomware attacks have increased.
This in turn has led cybercriminals to change their methods to evade authorities. Some groups have also promised to leave certain industries, such as those related to critical infrastructure, alone.
The authorities' more concerted efforts to crack down on ransomware operations have led many criminals to say that ransomware gangs should look for other ways to make money.
See also: BlackMatter ransomware: Demands 5.9 million from agricultural cooperative
However, researchers at Positive Technologies don't believe these attacks will stop anytime soon.
“We believe that ransomware operators responsible for high-profile attacks will find it difficult to abandon such a profitable business,” the company said in its report.
With ransomware remaining one of the most significant threats, Positive Technologies offers some key tips on how organizations can protect themselves.
- Regular security updates
- Regularly check for evidence indicating a possible breach
- Use of modern and reliable security tools, such as firewalls and antivirus
- Using sandboxing
- Training employees in cyber threat recognition
Source: TechRepublic
