Strategic Advisory: Ransomware Landscape
Strategic Advisory: Ransomware Landscape
In this Strategic Advisory, the ZeroFox Threat Intelligence team provides an in-depth analysis on the six-month activity of the ransomware landscape from May 2021 to October 2021.
Standing Intelligence Requirements
For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:
https://cloud.zerofox.com/alpha_team/advisories/14956
Link to Download
Executive Summary
In the past six months, the ZeroFox Threat Intelligence team has observed the changing ransomware landscape with new, current, and evolved threats. As new threats emerged, current threats persisted or evolved to include novel capabilities and techniques. Among new threats included the discovery of Colossus ransomware by ZeroFox Threat Intelligence and new ransomware families based on old ransomware with a history of success. One of the most active ransomware groups since 2019, REvil was responsible for large-scale attacks on organizations around the world including the Kaseya supply chain attack. The media attention from such attacks led to some popular cybercriminal networks prohibiting the discussion of ransomware or affiliate programs from posting advertisements, as these networks are often monitored by security researchers and law enforcement. Furthermore, the fight against ransomware escalated as world leaders enacted legislation responding to ransomware attacks and sanctions on cryptocurrency exchanges used to pay ransom demands.