The Cybercrime Inferno- 2022 Annual Report

Ransomware and extortion attacks have been a growing concern for individuals and organizations alike in recent years. These types of attacks involve hackers gaining unauthorized access to a computer system or network and either holding the system hostage by encrypting the data until a ransom is paid, or threatening to release sensitive information unless a ransom is paid.

In addition to these types of attacks, particular attention was focused on the sale of network access on cybercrime sources, which can potentially be used by hackers to carry out ransomware and extortion attacks.

This report will provide an overview of the state of ransomware and extortion attacks and network access sales in 2022, as well as the evolution of trends and ways to prevent and mitigate these types of attacks.

Wichtigste Erkenntnisse des Berichts:

• Almost 2,800 ransomware and extortion victims across around 60 platforms, with an average ransom demand of USD 3.7 million
• LockBit, Alphv, Conti, Black Basta and Hive responsible for more than 50% of victims; the US hit by 40% of attacks
• The rise of data-leak-only extortion actors such as Lapsus$ and Stormous, and new intimidation tactics used by ransomware gangs
• Over 2,200 network access offers worth more than USD 4.5 million, a 70% increase over 2021, led by the IABs zirochka, orangecake and r1z
• Attacks traced back to access sales, including Medibank, and the impact of the Russia-Ukraine war and the Conti, Yanluowang and LockBit leaks