Rapid7, a leader in extended risk and threat detection, has unveiled its latest research report, the Ransomware Radar Report, providing valuable insights into the evolving global ransomware threat landscape. The report, released in conjunction with Rapid7’s presence at Black Hat USA, offers a fresh perspective on attacker activity and techniques over an 18-month period, ending in June 2024.
According to the report, ransomware groups are continuously refining their strategies, adopting business models that resemble legitimate corporate enterprises. They are marketing their services, offering commissions to insiders in exchange for access, and even running formal bug bounty programs. Rapid7 researchers have also identified three major clusters of ransomware families with similar source code, indicating a shift towards specialized and highly effective ransomware variants.
The Ransomware Radar Report highlights several key findings. Firstly, 21 new ransomware groups have emerged in the first half of 2024, including the notable RansomHub, which has quickly established itself as a prominent extortion group. Additionally, the number of ransomware groups actively posting to leak sites has increased by 23% compared to the first half of 2023. Smaller organizations with annual revenues around $5 million have become more frequent targets, suggesting that they hold valuable data but may not have robust cybersecurity defenses in place.
Christiaan Beek, Senior Director of Threat Analytics at Rapid7, emphasized the importance of the report’s insights for informing cybersecurity strategies. He highlighted how the clusters and additional information provided in the report can help enhance prevention, detection, and response technologies. Rapid7 continuously investigates new techniques used by threat actors and ransomware operators to ensure customers are protected against the latest threats.
Security practitioners and other stakeholders fighting ransomware can access the full Ransomware Radar Report on Rapid7’s website. The report offers a comprehensive analysis of ransomware incidents and binaries globally, providing valuable insights into trends, attacker profiles, ransomware families, and their implications for cybersecurity defenses. Rapid7’s mission is to create a safer digital world by making cybersecurity simpler and more accessible, empowering security professionals to manage modern attack surfaces with their comprehensive security solutions.
For more information, visit Rapid7’s website or follow them on LinkedIn or X. Media inquiries can be directed to Stacey Holleran, Sr. Manager of Global Communications, at press@rapid7.com or (857) 216-7804.