BlackFog Releases Their State of Ransomware Report For February 2023

BlackFog has released the February 2023 State of Ransomware Report. BlackFog issues a monthly recap of the latest stats in ransomware attacks including prevalent threat actors, tactics, volume of attacks in varying countries and vertical sectors, rate of disclosed and undisclosed attacks compared to other months, and more. Please feel free to use this data in any articles, reports or research on ransomware attacks. 

Darren Williams, CEO and Founder, BlackFog, has provided perspectives on the state of ransomware for February 2023:

     “For the second month of 2023, we have seen new records broken, with February seeing a new high of 40 victims, a 43% increase from 2022. This month we continue to collect unreported data, and this month we see 543% of attacks remain unreported, a 65% increase over January.

Sector-wise we saw education continue to dominate with 17 victims, and healthcare and government closely behind with 15 each. Government attacks saw the biggest increase in February, with a 150% increase since January, while Healthcare and Education saw 88% and 70% increases respectively.

Data exfiltration continues as the main weapon of choice for ransomware and is used in 88% of all attacks. This month we also saw an increased number of attacks originating from China, which now represents 38% of all attacks, up from 36% in January. Russia remains stable at 9%.

Finally, in terms of variants, as we predicted in January we saw a dramatic increase in attacks from LockBit, as victims from previous months begin to disclose attacks. We expect this pattern to continue as unreported attacks continue to be dominated by LockBit, which is at 48%, while disclosed is at 24.3%. BlackCat also increased to 24.3%, although the growth in unreported remains significantly lower.”

I’d spend some time reading this report as it provides a lot of insight as to what threats you really need to worry about.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading