Ransomware Payments Decline While Data Exfiltration Payments Are On The Rise

Aug 15, 2024 12:28:35 PM By Stu Sjouwerman

The latest data from Coveware shows a slowing of attack efficacy, a decrease in ransom payments being made, and a shift in initial access tactics.

SEC Report Provides Insight into Key Tronic Ransomware Costs Totaling Over $17 Million

Aug 8, 2024 3:36:04 PM By Stu Sjouwerman

The financial repercussions of the May 2024 ransomware attack on the electronics manufacturing services firm Key Tronic underscores just how costly these attacks are.

The First Half of 2024 Results in More Than 1 Billion Data Breach Victims

Jul 31, 2024 1:31:00 PM By Stu Sjouwerman

New data shows that cyber attacks have resulted in double the number of data breaches in 2024 than throughout all of 2023.

Fortune 50 Ransomware Victim Pays an Eye-Watering $75 Million

Jul 30, 2024 1:46:55 PM By Stu Sjouwerman

The Dark Angels ransomware group got paid a staggering $75 million ransom from an undisclosed Fortune 50 victim.

Nearly All Ransomware Attacks Now Include Exfiltration of Data…But Not All Are Notified

Jul 29, 2024 8:19:31 AM By Stu Sjouwerman

Organizations are falling victim to ransomware attacks where data is stolen, but the victim isn’t being told about it. I have a theory as to why this is happening.

78% of Organizations Are Targets of Ransomware Attacks Two or More Times in Twelve Months

Jul 19, 2024 1:53:14 PM By Stu Sjouwerman

New data puts the spotlight on the frequency and impact of modern ransomware attacks, highlighting the overconfidence organizations are showing in their ability to defend and respond to ...

Change Healthcare Ransomware Attack May Cost Nearly $2.5 Billion

Jul 18, 2024 11:30:10 AM By Stu Sjouwerman

The ransomware attack against UnitedHealth Group’s Change Healthcare platform is expected to cost the company up to $2.45 billion, more than a billion dollars more than was previously ...

New Ransomware Threat Group Calls Attack Victims to Ensure Payments

Jul 17, 2024 1:50:47 PM By Stu Sjouwerman

Analysis of new ransomware group Volcano Demon provides a detailed look into how and why calling victims ups the chances of ransomware payment.

SEC Fines Publicly Traded Company $2.125 Million For Negligence Before, During, and After a Ransomware Attack

Jul 16, 2024 12:26:30 PM By Stu Sjouwerman

According to the filing, the organization in question failed to devise controls to adequately detect, respond to, and disclose an attack that included data exfiltration and service ...

Espionage-Intent Threat Groups Are Now Using Ransomware as a Diversion Tactic in Cyberattacks

Jul 16, 2024 11:40:00 AM By Stu Sjouwerman

A new report focused on cyber espionage actors targeting government and critical infrastructure sectors highlights the strategic use of ransomware for distraction or misattribution.

IRS Warns of Phishing Attacks Targeting Car Dealerships

Jul 16, 2024 11:37:55 AM By Stu Sjouwerman

The US Internal Revenue Service (IRS) has issued an advisory warning of phishing campaigns targeting car dealerships. The IRS says car dealers should be on the lookout for targeted ...

Phishing Continues to Be the Primary Entry to Ransomware Attacks

Jul 15, 2024 10:54:34 AM By Stu Sjouwerman

Phishing remains a top initial access vector for ransomware actors, according to researchers at Cisco Talos. The threat actors often use phishing to steal legitimate credentials so they ...

[On-Demand Webinar] Crack the Code on Ransomware: Empowering Your Last Line of Defense

Jul 15, 2024 8:00:00 AM By Stu Sjouwerman

Cybercriminals are maximizing the potential damage to your organization to boost their profits. A staggering 91% of reported ransomware attacks included a data exfiltration effort. Now is ...

Ransomware Attacks on Healthcare Is Costing Lives

Jul 11, 2024 2:01:48 PM By Roger Grimes

Ransomware is more prolific and expensive than ever. Depending on the source you read, the average or median ransomware payment was at least several hundred thousand dollars to well over ...

Ransomware Attack on U.K. Health Service Laboratory Disrupts Major London Hospital Services

Jul 2, 2024 1:55:38 PM By Stu Sjouwerman

What likely started as a quick ransomware “smash and grab” has turned into a headline case resulting in responses from both U.K. and U.S. law enforcement.

FREE Resource Kit for Ransomware Awareness Month in July

Jun 25, 2024 8:00:00 AM By Stu Sjouwerman

We’re here to help you and your users stay secure from the scourge of ransomware for Ransomware Awareness Month this July with a kit full of free resources!

“Operation Endgame” Ends with the Arrest of 4 Cybercriminal Suspects and 100 Servers

Jun 6, 2024 8:27:15 AM By Stu Sjouwerman

Coordinated efforts between law enforcement agencies across nine countries has resulted in a major disruption of a threat group’s malware and ransomware operations.

91% of Every Ransomware Attack Today Includes Exfiltrating Your Data

May 31, 2024 1:43:03 PM By Stu Sjouwerman

New insight into ransomware attacks show that cyber attacks are a top concern for organizations – with many not aware they were a victim until after the attack.

Cyber Insurance Claims Rise Due To Phishing and Social Engineering Cyber Attacks

May 21, 2024 3:31:34 PM By Stu Sjouwerman

New data covering cyber insurance claims through 2023 shows claims have increased while reaffirming what we already know: phishing and social engineering are the real problem.

Black Basta Ransomware Uses Phishing Flood to Compromise Orgs

May 16, 2024 12:54:01 PM By Roger Grimes

Rapid7 reports an interesting social engineering scheme that easily bypasses content filtering defenses and creatively uses a fake help desk to supposedly “help” users put down the attack.

Security Awareness Training Blog

Ransomware Blog

View Topics