Cyber Risks · Cisco Talos

2019: The year in malware

Summary: Cisco Talos reports ransomware incidents in Japan rose 4.7% year over year, with The Gentlemen the most active group as its leak-site listings more than doubled from January to July and Qilin ranking second and appearing to use AI. The Chaos ransomware group uses new malware called "msaRAT" that hijacks browsers, connecting through the browser rather than directly to command-and-control and hiding the attacker's IP via WebRTC over TURN.

Why it matters: Small and medium-sized businesses with capital under JPY 1 billion made up 80% of victims, and 134 ransomware incidents were reported in Japan in 2025, a 17.5% increase from 2024.

Read the original at Cisco Talos ↗

Topics
Malware
Related