Arete incident response engagements and explores the rise and fall of ransomware variants, trends in ransom demands and payments, impacts on critical infrastructure, and what Arete expects to see in 2024.
Here are the key findings:
- · Arete observed threat actors continually evolve their operations to become faster, stealthier, and wealthier. These changes ranged from new methods to bypass security defenses to new techniques for exfiltrating and posting stolen data.
- · A ransom was paid in just 31.3% of engagements in 2023, driving threat actors to become more aggressive in negotiation techniques and demand notably larger ransoms.
- · Threat actors faced increased pressure from law enforcement, including the successful disruption of the Hive ransomware operation and a temporary ransomware takedown of ALPHV/BlackCat
Arete transforms the way organizations prepare for, respond to, and prevent cybercrime. With decades of industry experience, Arete’s team combines hundreds of investigative, technical, and cyber risk management practitioners with best-in-class data and software engineers. This elite team of experts provides unparalleled capabilities to address the entire cyber incident life cycle, from incident response and restoration to advisory managed security services.
