Average and Median Ransom Payments

Ransomware Demands continue to rise as Data Exfiltration becomes common, and Maze subdues

|
Ransomware attacks in Q3 2020 were marked by a larger reliance on stolen data. During the quarter, Maze sunset their operations while Ryuk restarted their campaign ... Read More
Appendix A -    Common Ransomware groups by market share of attacks.

State and Local Cybersecurity: Defending Our Communities from Cyber Threats Amid COVID-19

|
Read Coveware’s prepared testimony on defending state and local organizations from ransomware ... Read More
Average Ransom Payment Line Chart

Ransomware Attacks Fracture Between Enterprise and Ransomware-as-a-Service in Q2 as Demands Increase

|
During the first quarter of 2020 ransomware threat actors took advantage of the economic and workplace disruption caused by the COVID-19 outbreak. A proliferation of new variants were observed as some regular ransomware types began to fade. Read on! ... Read More
Source: NinjaRMM

Managed Service Providers: Still Not Appreciating the Risk of Ransomware

|
Ransomware attacks against MSPs increase the blast radius of the attack to every downstream client endpoint. We coordinated a survey with NinjaRMM to determine if MSPs are considering this risk correctly ... Read More
Average Ransom Payment Line Chart

Ransomware Payments Up 33% As Maze and Sodinokibi Proliferate in Q1 2020

|
During the first quarter of 2020 ransomware threat actors took advantage of the economic and workplace disruption caused by the COVID-19 outbreak. A proliferation of new variants were observed as some regular ransomware types began to fade. Read on! ... Read More
Chart based on Emsisoft data plus data from    EPSRC EMPHASIS Ransomware project   .

Free Ransomware Help for Coronavirus Healthcare Providers

|
Coveware has teamed up with Emsisoft to offer free assistance to any frontline healthcare organization hit with ransomware during the Coronavirus pandemic ... Read More
Ransomware Amounts Paid Daily in Q4 2019.png

Ransomware Costs Double in Q4 as Ryuk, Sodinokibi Proliferate

|
Ransom demands more than doubled between Q3 and Q4 of 2019, as multiple variants gained broader distribution amongst enterprises large and small ... Read More
Original DoppePaymer TOR Site…before they called it DopplePaymer

The Marriage of Data Exfiltration and Ransomware

|
Ransomware and Data Exfiltration are being combined to further complicate the lives of victims. How will this new development shake out? ... Read More
The Media’s portrayal of cyber criminals

How the Ransomware Economy Has Grown

|
The ransomware cyber extortion economy has exploded over the last 2 years. How did we get here so fast? ... Read More

Phantom Incident Scam Threatens Release of Corporate PII

|
Several new types of Phantom Incident Scams are trying to extort victims based on old social engineering tricks. Don’t fall for these social engineering schemes ... Read More