Cybercriminal groups are now deploying ransomware within 24 hours of breaching victims.
See also: Amazon: Makes MFA mandatory for AWS 'root' accounts
According to a report, cybercriminals are now deploying ransomware within the first day of their targets’ initial breach, a dramatic decrease compared to the 4.5 days it took last year. This report reveals the latest development in the sector.
See also: Australia: Home Affairs Service hit by DDoS attack
Cybersecurity firm Secureworks warns that “2023 could be the most prolific year for ransomware attacks to date,” with three times as many victims reported on compromised websites in May of this year compared to the same month a year ago.
Leak sites are a poor metric for assessing the size of the ransomware problem, the company's report notes, pointing out that the leak site for Hive — which was taken down by law enforcement earlier this year — only listed about 10% of the total victims known to law enforcement.
"Therefore, leaked website data should be used with caution. Overall, however, it is clear from the ongoing activity that ransomware and extortion for data theft remain a viable criminal business model and a substantial threat to businesses," the report states.
According to Secureworks, in more than 50% of incident response cases, hackers managed to execute their malware within just 24 hours of breaching the victim's computer network.
The average dwell time has dropped from 4.5 days last year, and in 10% of cases his team saw ransomware usage within just five hours of initial access.
Source of information: therecord.media
