Year in Review: The biggest trends in ransomware
Summary: Cisco Talos' 2024 Year in Review reports that ransomware operators prioritized stealth over complexity for initial access, uninstalling security tools, creating new firewall rules for remote access, and using common, freely available tools. A new ransomware-as-a-service player rose quickly to become the second most prolific operator by targeting large payouts, while actors continued to favor industries with lower security budgets, irregular monitoring, and highly sensitive data.
What's compelling: The operators getting in are not the sophisticated ones - they are the quiet ones uninstalling your security tools and opening remote-access firewall rules with off-the-shelf software, and a single new RaaS entrant already ranks second by volume on the strength of large payouts.
Read the original at Cisco Talos ↗
- Topics
- Ransomware
- Related
- How adversaries use politics for compromise Cyber Risks ·Wasted Locker Goes "Big-Game Hunting" in 2020 Cyber Risks ·