Cyber Risks · Cisco Talos

Threat Source newsletter (March 2, 2023) — Little victories in the fight against ransomware

Summary: Cisco Talos reports that ransomware made up a smaller share of its incident response engagements in 2022 than the prior year, and Chainalysis found ransomware groups extorted about $456.8 million in 2022, roughly a 40 percent decrease from 2021 and 2020. Talos attributes the trend to a mix of sanctions such as recent penalties against Trickbot members, arrests and criminal charges, improved backups, and asset seizures and freezes that forced some groups to lay off people, while noting 2022 could be an aberration and that attacks continue, including a recent Dole incident that briefly halted production.

What you should know: A 40 percent drop in extorted payments is the kind of number that invites budget cuts, but Talos itself calls 2022 possibly an aberration and points to hospitals and schools as still-exposed targets.

Read the original at Cisco Talos ↗

Topics
Detection & Response
Mentions
CVE-2022-36537
Related
CVE-2022-36537: ZK Framework AuUploader Unspecified Vulnerability Known Exploited Vulnerabilities · Feb 27, 2023
YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026