Table of Contents
Ransomware operations are a thriving industry, and the total number of affiliates, threat actors, and groups is growing.
CHICAGO, IL – October 17th, 2024– CyberMaxx, the leading managed detection and response (MDR) provider, today released its Quarterly Ransomware Research Report, which revealed a 2% deviation in the volume of ransomware attacks and an 8.5% increase in active ransomware groups compared to Q2.
According to CyberMaxx research, there were 1,720 observed attacks in Q3. This data shows that attackers have not lost any momentum from Q2, one of the busiest quarters in the past 18 months, which observed 1,755 attacks.
In addition, the number of active ransomware groups is increasing. There were 64 active ransomware and extortion groups in Q3, an increase from 59 in Q2 2024 and 52 in Q3 2023.
While the average number of attacks per group was 27, a small number of groups have significantly skewed this figure.
With 247 attacks, Ransomhub was the top active group for this quarter. Its Ransom-as-a-Service (RaaS) affiliate model allows affiliates to control their own payments.
Lockbit remains in second place despite disruptions by law enforcement in its operations. Play, Qilin, and Meow were also among the top active groups for Q3 2024.
Despite being the most prolific group in the previous quarter, Disposessor has fallen from the list of top contenders.
The group carried out only 40 attacks in Q3, compared to 329 in Q2. Some have speculated that the group is taking credit for the work of others rather than carrying out attacks directly.
The cyber research team at CyberMaxx conducts routine threat research independent of client engagements in order to help foster collective intelligence among the cybersecurity community.
Access the full Ransomware Research Report here: Q3 2024 Ransomware Research Report
About CyberMaxx
CyberMaxx, LLC., founded in 2002, is the leading provider of managed detection and response (MDR), headquartered in Chicago, IL. CyberMaxx’s managed detection and response solution (MaxxMDR) is designed to be scalable for clients of all sizes, providing protection and improving the organization’s security posture, ultimately giving customers peace of mind that their systems and data are secure. CyberMaxx expanded its capabilities through the 2022 acquisition of CipherTechs, an international cybersecurity company providing a complete cybersecurity portfolio across MDR Services, Offensive Security, Governance, Risk & Compliance, DFIR, and 3rd party security product sourcing.
For more information visit: www.cybermaxx.com
CyberMaxx Media Contact
Clint Poole
cpoole@cybermaxx.com
