Summary
This document is a research report that outlines the state of ransomware threats in 2021, detailing the tactics, techniques, and procedures employed by cybercriminals. It describes the increasing prevalence of ransomware attacks across various sectors, with a focus on the United States as a primary target. The report presents statistics indicating that 2,845 ransomware cases occurred in 2021, with the Industrial & Energy, Retail, and Finance sectors being the most affected. It explains the operational methods of major ransomware groups, such as Conti and Lockbit, which utilize a 'steal, encrypt and leak' strategy to extort high-value ransoms. The report also discusses the implications of ransomware attacks, including data encryption and the potential for significant downtime for victim organizations. Furthermore, it addresses the evolving nature of ransomware tactics and the impact of regulatory measures, such as sanctions from the U.S. Department of the Treasury, on the operations of these groups. Recommendations for organizations to enhance their security posture against ransomware threats are also included.
