[SoW] W1 Oct | EN | Story of the week: Ransomware on the Darkweb

Malware Analysis
1

Hotsauce | S2W TALON

SoW (Story of the Week) publishes a report summarizing ransomware’s activity on the Darkweb. The report includes summary of victimized firms, Top 5 targeted countries and industrial sectors, status of dark web forum posts by ransomware operators, etc.

1. Weekly Status

  • A total of 48 victim companies were mentioned on ransomware leak sites based on 12 attack groups that had been updated in the past week
  • HQ of ransomware victim companies is the highest in the United States, accounting for 54.2% of the total victimized companies
  • Among all ransomware attack groups, Spook accounted for 37.5% of the activity, showing the highest activity

1.1. TOP 5 targeted countries

  1. USA — 54.2%
  2. France & Japan — 6.3%
  3. Chile & China & Netherlands & Romania & Germany — 4.2%
  4. Others — 2.1%

1.2. TOP 5 targeted industrial sectors

  1. Service — 12.5%
  2. Food & Healthcare — 10.4%
  3. Electronics — 8.3%
  4. Law & Technology — 6.3%
  5. Materials & IT & Insurance & Automotive & Financial & Transportation — 4.2%

1.3. TOP 5 Ransomware

  1. Spook — 37.5%
  2. CLOP — 14.6%
  3. BlackByte & Cuba — 8.3%
  4. Hive — 6.3%
  5. Vice Society & Everest & Payload.bin & BlackMatter & REvil — 4.2%

2. Weekly highlighted the post @TALON

[SoW] W1 Oct | EN | Story of the week: Ransomware on the Darkweb was originally published in S2W BLOG on Medium, where people are continuing the conversation by highlighting and responding to this story.

Article Link: [SoW] W1 Oct | EN | Story of the week: Ransomware on the Darkweb | by S2W | S2W BLOG | Medium