[SoW] W5 Aug | EN | Story of the week: Ransomware on the Darkweb

Malware Analysis
1

With contribution from Hotsauce (Denise Dasom Kim, Jungyeon Lim, Yeonghyeon Jeong, Youjin Lee, Sujin Lim, Chaewon Moon)| S2W TALON

SoW (Story of the Week) publishes a report summarizing ransomware’s activity on the Darkweb. The report includes summary of victimized firms, Top 5 targeted countries and industrial sectors, status of dark web forum posts by ransomware operators, etc.

1. Weekly Status

  • A total of 59 victim companies were mentioned on ransomware leak sites based on 13 attack groups that had been updated in the past week
  • HQ of ransomware victim companies is the highest in the United States, accounting for 53.4% of the total victimized companies
  • Among all ransomware attack groups, LockBit accounted for 32.2% of the activity, showing the highest activity

1.1. TOP 5 targeted countries

  1. USA — 53.4%
  2. Germany — 6.9%
  3. Italy & United Kingdom & France & India & Canada & Japan — 3.4%
  4. Others — 1.7%

1.2. TOP 5 targeted industrial sectors

  1. IT — 11.9%
  2. Construction & Healthcare — 10.2%
  3. Service — 8.5%
  4. Real Estate — 6.8%
  5. Transportation & Chemicals — 5.1%

1.3. TOP 5 Ransomware

  1. LockBit — 32.2%
  2. Marketo — 30.5%
  3. Conti — 10.2%
  4. Everest — 6.8%
  5. BlackMatter — 5.1%

2. Weekly highlighted the post @TALON

[SoW] W5 Aug | EN | Story of the week: Ransomware on the Darkweb was originally published in S2W BLOG on Medium, where people are continuing the conversation by highlighting and responding to this story.

Article Link: [SoW] W5 Aug | EN | Story of the week: Ransomware on the Darkweb | by S2W | S2W BLOG | Medium