KELA REPORT
Examining Ransomware Victims and Network Access Sales in Q2 2022
Ransomware groups continue to evolve and threaten organizations and companies around the world.
Share:
While some gangs reduced their activity in Q2 2022 or shut down, new actors like Black Basta emerged and continued extorting money from businesses. The report is based on KELA’s monitoring of ransomware gangs and initial access brokers’ activity in Q2.
Key Report Highlights:
- Around 650 victims in Q2 2022, led by LockBit, Black Basta, Alphv, Conti and Vice Society
- Black Basta’s emergence and the debate over whether it is a Conti rebrand or division, alongside Conti’s farewell
- LockBit 3.0, its bug bounty program and Alphv’s searchable “Collections” of stolen data
- The return of REvil, Stormous and Lapsus$ and new monetization models from RansomHouse and Industrial Spy
- Over 550 network access listings worth around USD 660,000, with IABs exploiting Exchange, Confluence and VMware Workspace One flaws
