Crimeware Report Trends and Highlights from Q3 2023

This report is a comprehensive analysis of ransomware and extortion attacks observed by Arete from July 1 to September 30, 2023. It outlines the consistency in attack volume compared to the first half of the year, while noting significant shifts in the ransomware ecosystem, particularly with the rise of ALPHV/BlackCat as the leading variant. The report documents various trends, including increased aggression in negotiation tactics by ransomware groups and the emergence of new variants such as INC ransomware. It also highlights the impact of global geopolitical instability on cyber activities, particularly in relation to the Israel/Hamas conflict, which has seen over 100 threat actor groups engaging in malicious activities. The report concludes with an analysis of ransom demands across different sectors, revealing that critical infrastructure and financial services are among the most targeted, with average ransom demands reflecting the pressures faced by these industries. Overall, the document provides a detailed overview of the evolving ransomware landscape and its implications for organizations.