Ransomware: Activity Levels Remain High Despite Disruption
Essential information
- Published
- 11/07/2024 13:06
- Modified
- 11/07/2024 13:35
- Tags
- 2024-07-11 CVE-2024-4577 akira alphv blackcat blacksuit cyclops blink disruption encryption lockbit noberus phobos qilin ransomware tellyouthepass vulnerability warp av killer
- Related entities
- 1 vulnerabilities (cve), 27 observables, 16 techniques (mitre), 12 malware
Description
While overall activity levels dipped slightly in the first quarter of 2024, the number of claimed attacks remained high, with LockBit accounting for over 20%. The report explores the changing tactics employed by ransomware actors, including the exploitation of vulnerabilities, the use of Bring-Your-Own-Vulnerable-Driver techniques, and the return of the Clop ransomware by the Snakefly group.