Microsoft’s security team says it’s tracking over 100 ransomware actors
Microsoft has revealed it is tracking more than 100 threat actors deploying ransomware (opens in new tab) against businesses around the world.
In a recent Twitter thread (opens in new tab), the company discussed the current state of ransomware, saying the Ransomware-as-a-service (RaaS) ecosystem continues evolving and expanding.
The threat actors (of which the company tracks more than 100) are bringing “varying techniques, goals, and skillsets” to the fray. Right now, more than 50 unique ransomware families are active and in use, the company said.
Focusing on the build-up
While phishing remains the number one way for hackers to deliver ransomware payloads to victims, they’re “increasingly” relying on other techniques, as well, Microsoft added.
Among others, they’re using malicious ads to deliver victims to websites hosting ransomware and other malware. Some are looking to exploit recently patched vulnerabilities, in hopes that their targets did not get the chance to apply the patch on time. Others are trying to distribute malware that poses as software updates.
Among the most popular ransomware variants these days are Lockbit Black, BlackCat (aka ALPHV), Play, Vice Society, Black Basta, & Royal.
To defend against ransomware, Microsoft says, businesses should not focus on these payloads. Instead, they should focus on the “chain of activities” that lead to the final compromise. In other words, businesses need to make sure their endpoints are always updated with the latest patches, and that their employees are well-trained and always on the lookout for a potential phishing attack.
In phishing attacks, emails usually carry a sense of urgency, demanding the user to immediately download and run a file, or visit a website. Most popular phishing themes include a DHL parcel pending delivery, an unpaid invoice, or similar.
However, that doesn’t mean businesses should not deploy malware protection and other cybersecurity solutions. A solid backup solution is a must, in the combat against ransomware, as well as a firewall and an antivirus solution.
Audio player loading… Microsoft has revealed it is tracking more than 100 threat actors deploying ransomware (opens in new tab) against businesses around the world. In a recent Twitter thread (opens in new tab), the company discussed the current state of ransomware, saying the Ransomware-as-a-service (RaaS) ecosystem continues evolving and…
Recent Posts
- NYT Strands today — hints, answers and spangram for Saturday, April 20 (game #48)
- You can buy a refurbished Steam Deck for almost half off
- Applying the mathematical principles of Pareto to Mario Kart 8
- Kia’s more affordable EV2 is getting ready to undercut Tesla
- Finally, someone used Pareto’s economic theories to find the best Mario Kart 8 racer
Archives
- April 2024
- March 2024
- February 2024
- January 2024
- December 2023
- November 2023
- October 2023
- September 2023
- August 2023
- July 2023
- June 2023
- May 2023
- April 2023
- March 2023
- February 2023
- January 2023
- December 2022
- November 2022
- October 2022
- September 2022
- August 2022
- July 2022
- June 2022
- May 2022
- April 2022
- March 2022
- February 2022
- January 2022
- December 2021
- November 2021
- October 2021
- September 2021
- August 2021
- July 2021
- June 2021
- May 2021
- April 2021
- March 2021
- February 2021
- January 2021
- December 2020
- November 2020
- October 2020
- September 2020
- August 2020
- July 2020
- June 2020
- May 2020
- April 2020
- March 2020
- February 2020
- January 2020
- December 2019
- November 2019
- December 2011