Three ransomware groups led the charge in volume of ransomware attacks

CHICAGO, IL – July 17th, 2024 – CyberMaxx, the leading managed detection and response (MDR) provider, today released its Quarterly Ransomware Research Report (link), which found a 37% increase in successful ransomware attacks in Q2 compared to the previous quarter of 2024.

According to CyberMaxx research, the second quarter of 2024 had 1,755 total successful ransomware and extortion attacks, up from 1,283 in Q1 2024. When compared to the Q2 of 2023, there was an increase of 53% in the number of successful attacks. The research shows a trend in the trajectory of ransomware attacks growing quarter over quarter. For example, in 2023, there was an increase of 26% from Q1 compared to Q2.

While the average number of attacks per group is 29.75, a few groups have significantly skewed this figure upwards. Dispossessor, Lockbit, and Ransomhub were the top groups, accounting for almost 40% of the overall volume in Q2 2024. During the quarter, Dispossessor surfaced mimicking LockBit and offering a Ransomware-as-a-Service (RaaS), and RansomHub operated an affiliate model for its RaaS, allowing affiliates to control their own payments. However, LockBit stands out as the only top contender this quarter with a custom ransomware strain.

“The first half of 2024 has painted a concerning picture for cybersecurity. The surge in ransomware attacks, particularly the extortion attacks we’re witnessing, highlights a growing vulnerability in our digital infrastructure that cannot continue unchecked,” said Connor Jackson, security research manager at CyberMaxx. “To fortify your defenses against the rising tide of ransomware, understanding your organization’s threat landscape, minimizing attack surfaces, and staying diligent with patching vulnerabilities are all essential measures.”

The cyber research team at CyberMaxx conducts routine threat research independent of client engagements in order to help foster collective intelligence among the cybersecurity community.

Access the full Ransomware Research Report here: Q2 2024 Ransomware Research Report

About CyberMaxx

CyberMaxx, founded in 2002, is the leading provider of managed detection and response (MDR) services. We help customers reduce risk by tightly integrating MDR with offensive security, threat hunting, security research, digital forensics and incident response (DFIR) to continually adapt to new and evolving threats. Our modern MDR approach is tailored to the unique characteristics and risk factors of each customer, enabling us to take full ownership of the response process and, optionally, manage key security controls. By thinking like an adversary and defending like a guardian, we help our customers stay a step ahead of threat actors.

For more information visit: www.cybermaxx.com

CyberMaxx Media Contact

Clint Poole
cpoole@cybermaxx.com