Blockchain analysis company Chainalysis has released a report stating that ransom payments made last year to ransomware gangs exceeded $350 million, up 311% compared to figures in 2019, according to ZDNet. Chainalysis noted that this estimate was likely lower than the actual value, as many victims chose not to disclose ransomware attacks made against them and whether they paid a ransom. In a previous report, Chainalysis revealed that ransomware payments made up 7% of all the money that cryptocurrency criminals made in 2020. Last year’s top earners included ransomware groups such as Ryuk, the now-defunct Maze, Doppelpaymer, Netwalker, which was recently apprehended by authorities, Conti, and REvil, also known as Sodinokibi. Chainalysis also speculates that fewer threat actors are actively engaging in ransomware activities than previously believed after analyzing victims’ ransom payment trends and profit trends of ransomware-as-a-service businesses. The firm also confirms previous reports that ransomware criminals launder their money through “Bitcoin mixing” services and pay for other cybercrime services using these same funds.
Several U.S. defense and government organizations have been targeted by state-backed Chinese hacking group Bronze Silhouette, also known as Volt Typhoon, for military intelligence over a period of at least two years, according to The Record, a news site by cybersecurity firm Recorded Future.
Russian, North Korean, and Iranian advanced persistent threat operations have been launching more attacks aimed at compromising small- and medium-sized businesses, as well as their regional managed service providers, reports SecurityWeek.
Separate cyberattacks have been launched by Iranian advanced persistent threat groups against Israel-based entities, according to The Record, a news site by cybersecurity firm Recorded Future.