Qilin was the dominant ransomware group in April, with the gang's sharp increase in attacks from March to April potentially due to the transfer of RansomHub affiliates after Qilin's administrator touted updated ransomware and DDoS extortion capabilities following the RansomHub outage, a report from Comparitech revealed. The Akira, Play, Lynx, and NightSpire ransomware operations were the next most prolific groups last month. Most ransomware attacks last month were conducted against businesses, followed by government organizations, healthcare entities, and education institutions, with intrusions by Scattered Spider, SafePay, and Rhysida against Marks & Spencer, German recycling manufacturer Eu-Rec GmbH, and the Oregon Department of Environmental Quality, respectively, being the most significant.
Ransomware
RansomHub outage prompts reduced ransomware incidence in April

(Adobe Stock)
Infosecurity Magazine.
Qilin was the dominant ransomware group in April, with the gang's sharp increase in attacks from March to April potentially due to the transfer of RansomHub affiliates after Qilin's administrator touted updated ransomware and DDoS extortion capabilities following the RansomHub outage, a report from Comparitech revealed. The Akira, Play, Lynx, and NightSpire ransomware operations were the next most prolific groups last month. Most ransomware attacks last month were conducted against businesses, followed by government organizations, healthcare entities, and education institutions, with intrusions by Scattered Spider, SafePay, and Rhysida against Marks & Spencer, German recycling manufacturer Eu-Rec GmbH, and the Oregon Department of Environmental Quality, respectively, being the most significant.
Attacks involving ransomware totaled 479 last month, which is significantly lower than ransomware intrusions recorded between January and March, with the decline primarily due to the shutdown of RansomHub ransomware-as-a-service operation at the end of March, according to Qilin was the dominant ransomware group in April, with the gang's sharp increase in attacks from March to April potentially due to the transfer of RansomHub affiliates after Qilin's administrator touted updated ransomware and DDoS extortion capabilities following the RansomHub outage, a report from Comparitech revealed. The Akira, Play, Lynx, and NightSpire ransomware operations were the next most prolific groups last month. Most ransomware attacks last month were conducted against businesses, followed by government organizations, healthcare entities, and education institutions, with intrusions by Scattered Spider, SafePay, and Rhysida against Marks & Spencer, German recycling manufacturer Eu-Rec GmbH, and the Oregon Department of Environmental Quality, respectively, being the most significant.
An In-Depth Guide to Ransomware
Get essential knowledge and practical strategies to protect your organization from ransomware attacks.
Related Events
Get daily email updates
SC Media's daily must-read of the most current and pressing daily news
You can skip this ad in 5 seconds