Ransomware

RansomHub outage prompts reduced ransomware incidence in April

Ransomware attack alert on monitor screen in data center, network security concept

Attacks involving ransomware totaled 479 last month, which is significantly lower than ransomware intrusions recorded between January and March, with the decline primarily due to the shutdown of RansomHub ransomware-as-a-service operation at the end of March, according to Infosecurity Magazine.

Qilin was the dominant ransomware group in April, with the gang's sharp increase in attacks from March to April potentially due to the transfer of RansomHub affiliates after Qilin's administrator touted updated ransomware and DDoS extortion capabilities following the RansomHub outage, a report from Comparitech revealed. The Akira, Play, Lynx, and NightSpire ransomware operations were the next most prolific groups last month. Most ransomware attacks last month were conducted against businesses, followed by government organizations, healthcare entities, and education institutions, with intrusions by Scattered Spider, SafePay, and Rhysida against Marks & Spencer, German recycling manufacturer Eu-Rec GmbH, and the Oregon Department of Environmental Quality, respectively, being the most significant. 

An In-Depth Guide to Ransomware

Get essential knowledge and practical strategies to protect your organization from ransomware attacks.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds