https://www.channelfutures.com/wp-content/themes/channelfutures_child/assets/images/logo/footer-new-logo.png
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • Complete 2023 MSP 501 Rankings
    • 2023 MSP 501 50-1
    • 2023 MSP 501 100-51
    • 2023 MSP 501 150-101
    • 2023 MSP 501 200-151
    • 2023 MSP 501 250-201
    • 2023 MSP 501 300-251
    • 2023 MSP 501 350-301
    • 2023 MSP 501 400-351
    • 2023 MSP 501 450-401
    • 2023 MSP 501 501-451
    • NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Channel Futures 20: Top Tech Providers
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2023 Editorial Calendar
  • Awards
    • Back
    • 2023 MSP 501
    • 2023 NextGen 101
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Technology Advisor 101 (TA 101)
    • Channel Leaders Lists
  • Events
    • Back
    • 2024 CP Expo Call for Speakers
    • Channel Futures Leadership Summit
    • MSP Summit
    • CP Conference & Expo
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
Channel Futures
  • NEWSLETTER
  • Home
  • Technologies
    • Back
    • SDN/SD-WAN
    • Cloud
    • RMM/PSA
    • Security
    • Telephony/UC/Collaboration
    • Cable
    • Mobility & Wireless
    • Fiber/Ethernet
    • Data Centers
    • Backup & Disaster Recovery
    • IoT
    • Desktop
    • Artificial Intelligence
    • Analytics
  • Strategy
    • Back
    • Mergers and Acquisitions
    • Channel Research
    • Business Models
    • Distribution
    • Technology Solutions Brokerages
    • Sales & Marketing
    • Best Practices
    • Vertical Markets
    • Regulation & Compliance
  • MSP 501
    • Back
    • Complete 2023 MSP 501 Rankings
    • 2023 MSP 501 50-1
    • 2023 MSP 501 100-51
    • 2023 MSP 501 150-101
    • 2023 MSP 501 200-151
    • 2023 MSP 501 250-201
    • 2023 MSP 501 300-251
    • 2023 MSP 501 350-301
    • 2023 MSP 501 400-351
    • 2023 MSP 501 450-401
    • 2023 MSP 501 501-451
    • NextGen 101 Rankings
  • Intelligence
    • Back
    • Galleries
    • Podcasts
    • From the Industry
    • Reports/Digital Issues
    • Webinars
    • White Papers
  • Channel Futures TV
  • EMEA
  • Channel Chatter
    • Back
    • People on the Move
    • New/Changing Channel Programs
    • New Products & Services
    • Industry Honors
  • Resources
    • Back
    • Channel Futures 20: Top Tech Providers
    • Advisory Boards
    • Industry Organizations
    • Our Sponsors
    • Advertise
    • 2023 Editorial Calendar
  • Awards
    • Back
    • 2023 MSP 501
    • 2023 NextGen 101
    • Channel Influencers
    • Circle of Excellence
    • DE&I 101
    • Technology Advisor 101 (TA 101)
    • Channel Leaders Lists
  • Events
    • Back
    • 2024 CP Expo Call for Speakers
    • Channel Futures Leadership Summit
    • MSP Summit
    • CP Conference & Expo
    • Channel Partners Event Coverage
    • Webinars
    • Industry Events
  • About Us
  • DE&I
    • Newsletter
  • REGISTER
  • MSPs
  • VARs / SIs
  • Agents
  • Cloud Service Providers
  • Channel Partners Events
 Channel Futures

Channel Research


Shutterstock

Ransomware alarm

Ransomware Attacks Reach ‘Stratospheric’ Levels

  • Written by Edward Gately
  • September 22, 2021
Ransomware attacks now account for 69% of all attacks involving malware.

Cybersecurity researchers aren’t running out of terms to describe how bad ransomware attacks have become. The latest, “stratospheric,” comes from Positive Technologies.

According to Positive’s Cybersecurity Threatscape: Q2 2021, ransomware attacks now account for 69% of all attacks involving malware.

The report also finds:

  • The percentage of attacks aimed at compromising computers, servers and network equipment increased from 71% in the first quarter to 87% in the second quarter.
  • Attacks motivated by financial gain increased from 43% to 59% over the same time period.
  • Email remains the main method of spreading malware in attacks against organizations (58%).
  • The volume of attacks on governmental institutions soared from 12% in the first quarter to 20% in the second.

Well-Organized Structure, High Ransoms

Ekaterina Kilyusheva heads Positive Technologies‘ Information Security Analytics Research Group.

Positive Technologies' Ekaterina Kilyusheva

Positive Technologies’ Ekaterina Kilyusheva

“There’s a low threshold of entry into the extortionate business, which has a well-organized structure,” She said. “And criminals are receiving large amounts of ransoms. Within the framework of partnership programs, ransomware operators have been able to attract many low-skilled cybercriminals who can be quite successful in distributing malware and monetizing their skills. Good bonuses are another reason for the proliferation of ransomware. When even one successful operation pays for all the efforts spent, this motivates criminals to continue their attacks.”

The retail sector is seeing a shift in attacks and motives, according to Positive.. There was a sharp decrease in the number of Magecart attacks, as criminals shift from stealing data, such as payment details, to pursuing direct financial gain through ransomware attacks. Malware was used in six out of 10 attacks against retail. That’s up from only 26% during the same quarter last year. Moreover, ransomware accounted for 95% of all malware used in attacks against the sector.

Threat actors also are actively targeting manufacturing and industrial companies.

Positive Technologies previously thought attackers distributing malware posed a danger mainly to Windows systems, Kilyusheva said.

“Now we see that the trend toward creating malware for attacks on Unix systems, virtualization tools, and orchestrators has taken hold,” she said. “In Q1 2021, we wrote that many attackers targeted virtual infrastructure. In Q2, they were joined by ransomware operators. REvil, RansomExx (Defray), Mespinoza, GoGoogle, DarkSide, Hellokitty and Babuk Locker are ready to be used in attacks on virtual infrastructure based on VMware ESXi.”

Most Common Targets

The most common ransomware targets during the quarter were governmental, medical, industrial companies, and scientific and educational institutions.

“Large companies, which are more willing to make deals with cybercriminals, are the main targets for ransomware distributors,” Kilyusheva said. “There are several reasons for this. First, it takes a lot of time to recover, which can be critically important for the activities of a large company. Second, attackers not only encrypt data, but also steal it for the purpose of blackmail, and the disclosure of information, including customer data, may be absolutely unacceptable for a large organization. And of course, large organizations are financially capable of paying the ransom.”

Positive Developments

On a positive note, some of the latest ransomware attacks attracted special attention of law enforcement agencies, Kilyusheva said.

“The ransomware rampage culminated in an attack on Colonial Pipeline, the largest U.S. pipeline system,” she said. “Law enforcement agencies reacted quickly, and the DarkSide operators responsible for it lost access to their servers in a matter of days. The criminals had no choice but to announce the termination of their activity, and some other operators followed their example. Due to the mass exodus from the market, the boom of ransomware attacks observed in April began to gradually subside.”

There are also disputes on dark web forums regarding the business of ransomware operators in general, Kilyusheva said. Some forums have banned advertising of affiliate ransomware programs.

“This step, having further complicated the life of ransomware operators, could precipitate a change in their business structure,” she said. “We believe ransomware operators responsible for high-profile attacks will find it hard to quit such a profitable business, and will instead wait for things to blow over before developing a new concept, but there is a possibility that the number of attacks will decrease. For example, June saw a halving of such attacks.”

Want to contact the author directly about this story? Have ideas for a follow-up article? Email Edward Gately or connect with him on LinkedIn.
Tags: MSPs VARs/SIs Strategy Best Practices Channel Research Cloud Security Vertical Markets

Most Recent


  • John DeLozier, ConvergeOne, people on the move
    Channel People on the Move: HP, 8x8, Five9, Nitel, RapidScale, More
    New hires and promotions featured here also include Bridgepointe, C1, Telarus, Kore and many more.
  • Jake SChuman Shane McNamara Avant SPecial Forces
    Avant Rolls Out Vendor Analytics, Names Top Supplier NPS Scores
    Avant is providing NPS scores for its vendors based on a growing pool of reviews from its technology advisor partners.
  • 2023 Kaseya DattoCon logo
    Kaseya Intros AI Bots, Credit for Unused Appliances, Passive Recurring Revenue
    Kaseya CEO Fred Voccola kicks off DattoCon with partner updates, new products and a litter of AI bots
  • Boomi GPT debuts
    Boomi GPT First Offering in Company's New AI Suite
    Boomi announced its AI suite this past summer.

Leave a comment Cancel reply

-or-

Log in with your Channel Futures account

Alternatively, post a comment by completing the form below:

Your email address will not be published. Required fields are marked *

Related Content

  • Cloud marketplace
    Google Cloud Marketplace Reduces Its Fees, By a Lot
  • security lock
    Hybrid Work Adoption Will Invite More Cyberattacks
  • sase
    New Report: 65% of Partners Haven't Sold SASE Yet
  • network security
    SASE Implementation Set to Double Yearly Through 2025, Vendor Interest Growing

Upcoming Events

View all

Channel Futures Leadership Summit

October 30, 2023 - November 2, 2023

Channel Partners Conference & Expo

March 11, 2024 - March 14, 2024

Channel Futures Leadership Summit 2024

September 17, 2024 - September 19, 2024

Galleries

View all

Channel People on the Move: HP, 8×8, Five9, Nitel, RapidScale, More

October 3, 2023

7 Trends Impacting Ingram Micro Partners: Marriage of AI, Data Looms Large

October 2, 2023

Nutanix Partner Program Sees More Changes, Vendor Touts ‘Channel-Led’

October 2, 2023

Industry Perspectives

View all

Partners Balance Multicloud Opportunity, Complexity

September 25, 2023

Why Conversational AI Matters for Your Customers and How It Can Boost Your Revenue

September 15, 2023

The 5 Ds that Lead to Unplanned Business Sales

September 13, 2023

Webinars

View all

MSP 501: Leadership in Cybersecurity

October 19, 2023

DE&I: Find the Balance that Works for You

September 7, 2023

Above and Beyond with the NextGen 101ers

August 30, 2023

White Papers

View all

6 UCaaS Reseller Challenges and How Real World Businesses Solved Them

February 1, 2023

Frost Radar: North American UCaaS Market, 2022

February 1, 2023

The Complete Guide to White-Label UCaaS for Reseller Success

February 1, 2023

Channel Futures TV

View all

Coffee with Craig and James Episode 129: ZLH Enterprises

Coffee with Craig and James Episode 128: Channel Partner Strategies Intelligence Service

August 25, 2023

Coffee with Craig and James Episode 127: Expereo, Movie Night Returns

August 18, 2023

Coffee with Craig and James Episode 126: ARG

July 28, 2023

MSP 501

The industry's largest and most comprehensive partner awards program.

Newsletters and Updates

Sign up for The Channel Report, Channel Futures Update, MSP 501 Newsletter and more.

Live Channel Events

Get the latest information on the next industry-leading Channel Partners event.

Galleries

Educational slide shows and images from live events.

Media Kit And Advertising

Want to reach our audience? Access our media kit.

DISCOVER MORE FROM INFORMA TECH

  • Channel Partners Events
  • Telecoms.com
  • MSP 501
  • Black Hat
  • IoT World Today
  • Omdia

WORKING WITH US

  • Contact
  • About Us
  • Advertise
  • Newsletter

FOLLOW Channel Futures ON SOCIAL

  • Privacy
  • CCPA: “Do Not Sell My Data”
  • Cookie Policy
  • Terms
Copyright © 2023 Informa PLC. Informa PLC is registered in England and Wales with company number 8860726 whose registered and Head office is 5 Howick Place, London, SW1P 1WG.
This website uses cookies, including third party ones, to allow for analysis of how people use our website in order to improve your experience and our services. By continuing to use our website, you agree to the use of such cookies. Click here for more information on our Cookie Policy and Privacy Policy.
X