KELA REPORT
The Cybercrime Inferno- 2022 Annual Report
Ransomware attacks occur when hackers gain unauthorized access to a computer system or network and hold it hostage through data encryption or threats to expose sensitive information until a ransom is paid.
Share:
Ransomware and extortion attacks have been a growing concern for individuals and organizations alike in recent years. These types of attacks involve hackers gaining unauthorized access to a computer system or network and either holding the system hostage by encrypting the data until a ransom is paid, or threatening to release sensitive information unless a ransom is paid.
In addition to these types of attacks, particular attention was focused on the sale of network access on cybercrime sources, which can potentially be used by hackers to carry out ransomware and extortion attacks.
This report will provide an overview of the state of ransomware and extortion attacks and network access sales in 2022, as well as the evolution of trends and ways to prevent and mitigate these types of attacks.
Key Report Highlights:
- Almost 2,800 ransomware and extortion victims across around 60 platforms, with an average ransom demand of USD 3.7 million
- LockBit, Alphv, Conti, Black Basta and Hive responsible for more than 50% of victims; the US hit by 40% of attacks
- The rise of data-leak-only extortion actors such as Lapsus$ and Stormous, and new intimidation tactics used by ransomware gangs
- Over 2,200 network access offers worth more than USD 4.5 million, a 70% increase over 2021, led by the IABs zirochka, orangecake and r1z
- Attacks traced back to access sales, including Medibank, and the impact of the Russia-Ukraine war and the Conti, Yanluowang and LockBit leaks
