Most Ransomware Attacks Now Happen at Night>
Info Security Magazine – Phil Muncaster
This article discusses key findings from Malwarebytes’ 2024 State of Ransomware Report:
1) Timing of attacks:
– Most ransomware attacks now occur between 1am and 5am local time
– Attackers target off-hours to catch cybersecurity teams unprepared
2) Attack speed:
– The entire ransomware attack chain (from initial access to encryption) has shortened significantly
– Now takes hours instead of weeks
3) Attack techniques:
– Living-off-the-land techniques are common for evading detection
4) Defensive recommendations:
– 24/7 managed detection and response is crucial
– Traditional tools and standard work hours are insufficient for protection
5) Geographic trends:
– US (63%) and UK (67%) saw the most victims and double-digit increases in attacks
6) Attacker diversity:
– Attacks by groups outside the top 15 ransomware gangs increased from 25% to 31%
– Indicates ransomware is becoming more accessible to a broader range of cybercriminals
7) Targeted sectors:
– Services and manufacturing were the most targeted
– Manufacturing saw a 71% year-on-year increase in attacks
The report emphasizes the evolving tactics of ransomware attackers and the need for organizations to adapt their cybersecurity strategies accordingly, particularly focusing on round-the-clock protection.
Link: https://www.infosecurity-magazine.com/news/most-ransomware-attacks-happen