Tag

Ransom Payments

All articles tagged with #ransom payments

cybersecurity1 year ago

"2023 Sees Record $1.1 Billion in Ransomware Payments"

Ransomware payments reached a record $1.1 billion in 2023, surpassing previous highs and reversing the decline seen in 2022. The resurgence of ransomware was attributed to escalating attacks against major institutions and critical infrastructure, with groups like Clop employing a "big game hunting" strategy to target large, deep-pocketed victims for substantial payments. Ransomware gangs are adapting to a decline in ransom payments by shifting towards targeting larger companies, and the laundering of ransom payments primarily involves mixing services, underground exchanges, and platforms without KYC requirements. Despite a decline in victims opting to pay, 2023 has been a profitable year for ransomware gangs, but efforts to discourage ransom payments may lead to a critical point where ransomware operations become financially unsustainable.

cybersecurity2 years ago

DOJ Disrupts Blackcat Ransomware Group, but Hackers Vow Revenge

The US Department of Justice (DOJ) has disrupted the Blackcat ransomware group, also known as ALPHV or Noberus, which has targeted over 1,000 computer networks and extorted millions of dollars from victims. The FBI developed a decryption tool that has helped over 500 Blackcat victims recover their data, saving more than $68 million in ransom payments. The DOJ has gained visibility into the group's network and seized several of its websites. The DOJ warns that this is just the beginning of their ongoing efforts to dismantle cybercriminal organizations.

cybersecurity2 years ago

New York Mandates Reporting of Ransom Payments and Strengthens Cybersecurity Regulations

New York's Department of Financial Services has introduced new regulations requiring banks and other financial institutions to implement governance, reporting, and training measures to enhance their cybersecurity. The rules include a 24-hour deadline for reporting ransom payments made in connection with a ransomware event and a 30-day requirement to explain the reasons behind the payment. Banks must also implement multifactor authentication for employees and customers accessing their information systems. The regulations aim to protect customer data and maintain the integrity of the financial system in response to the increasing number of cyberattacks. The rules harmonize with existing regulations and frameworks and emphasize the role of boards in overseeing cybersecurity risk management. The regulations will be effective from November 1, with certain provisions taking effect at later dates.