Black Kite Unveils Month-to-month Ransomware Dashboards

PRESS RELEASE

Boston, MA – January 24, 2023 – Black Kite, the chief in third-party cyber threat intelligence, immediately unveiled the {industry}’s first month-to-month ransomware dashboard, that includes essential insights for safety groups, media, analysts, and different {industry} leaders. The useful resource offers information, graphs, tendencies, and key insights from Black Kite’s menace intelligence workforce concerning the high ransomware teams, their victims, and assault patterns. Black Kite additionally analyzes the highest ransomware indicators to determine widespread vulnerabilities exploited by lively ransomware teams, and utilizing information and machine studying, Black Kite’s Ransomware Susceptibility Index (RSI) paints a complete image of the industry-specific cyber-risks that organizations face every month.

In December alone, the analysis workforce monitored over 360 victims. The most typical indicators of compromise had been MX and DNS misconfigurations that allowed for spoofing and phishing assaults (266) and in-use companies and merchandise with vulnerabilities of excessive exploitability (233). Moreover, 49% of victims had open RDP or SMB ports publicly seen. Analysis additionally revealed that though LockBit continues to dominate the panorama, an rising ransomware group, WereWolves, entered the highest three for the primary time.

“Since not too long ago coming into the scene, the WereWolves ransomware group has focused 26 victims within the U.S., Europe, and Russia,” stated Ferhat Dikbiyik, head of analysis at Black Kite. “The group is uncommon as a result of it has a full-fledged web site that recruits new members and presents a bounty program for safety vulnerabilities. It’s also uncommon to see ransomware teams focusing on Russian firms, which we have now solely witnessed earlier than from short-lived ransomware teams.”

The month-to-month dashboard has surfaced tendencies over the previous six months, together with:

LockBit has the largest share on this set of victims with 21% of victims revealed by the group.
Exploiting vulnerabilities has develop into the commonest technique.
New teams, together with WereWolves, Whereas Play, 8base, and Akira, are placing themselves within the high ranks with an rising variety of victims.
The U.S. continues to be probably the most focused nation. Nevertheless, there have been uncommon peaks in some international locations, corresponding to Russia, Bulgaria, Iran, and Israel, as a result of a number of political conflicts.
The manufacturing {industry} remained one of many high industries focused and noticed a rise in assaults within the second half of the yr.
There was a rise in assaults on the healthcare and knowledge industries.

“Ransomware gangs are always evolving their ways, and are working at rising scales with a view to get greater income from their victims,” stated Dikbiyik. “As there isn’t any signal of those assaults slowing down, it’s essential to know these gangs’ motivation and actions with a view to have smarter safety methods to forestall assaults. Because of this we have now created a free useful resource and can proceed to observe the panorama for tendencies with industry-wide affect.”

As these teams develop into extra subtle, it’s crucial that firms perceive their threat and are armed with the instruments to make knowledgeable selections about their safety methods. Black Kite’s month-to-month report dashboard offers essential visibility to assist join the dots between ransomware teams’ patterns and their victims in order that the dangerous actors are not working within the shadows.

To see Black Kite’s newest ransomware information, go to the December report touchdown web page, or view information from the final six months on the Ransomware Stories web page.

About Black Kite

Black Kite offers firms a complete, real-time view into cyber ecosystem threat to allow them to make knowledgeable threat selections and enhance enterprise resilience whereas repeatedly monitoring extra distributors, companions, and suppliers in an ever-changing digital panorama.

By an automatic course of, and a mix of menace, enterprise and threat info, Black Kite offers cyber threat intelligence that goes past a easy threat rating or ranking.

Black Kite serves greater than 1,500 clients in a variety of industries and has acquired quite a few {industry} awards and recognition from clients.

Study extra at www.blackkite.com, on the Black Kite weblog.