The world of cybersecurity has been abuzz with a recent resurgence of ransomware attacks. According to data released by NCC Group, the number of successful campaigns has skyrocketed, with a 47% increase in July compared to June. This upward trend is attributed to old and familiar faces in the ransomware-as-a-service (RaaS) game.

The Top Dogs: Lockbit and Conti’s Offshoots

Lockbit, a well-established RaaS group, has taken the top spot as the most prolific ransomware gang of the summer, accounting for 62 attacks in July. This is a significant increase from the previous month, with an additional 10 attacks compared to Hiveleaks and BlackBasta combined. Lockbit’s success can be attributed to its ability to maintain its foothold as a threat actor, making it a force to be reckoned with.

The second and third most prolific groups are Hiveleaks and BlackBasta, respectively. Hiveleaks saw a 440% rise in attacks since June, while BlackBasta experienced a 50% increase. These rapid rises suggest that the resurgence of ransomware attacks is indeed connected to the restructuring of Conti, the world’s former leading ransomware gang.

A New Era for Conti

In May, the United States government launched an initiative to disrupt Russian cybercrime by offering up to $15 million in rewards for information about Conti. This move likely prompted Conti to undergo structural changes, resulting in the formation of two new offshoots: Hiveleaks and BlackBasta.

Hiveleaks is associated with Conti as an affiliate, while BlackBasta represents a replacement strain. The authors speculate that this restructuring has led to an increase in total compromises, which may further escalate in August.

A Cautionary Tale for Organizations

As the number of ransomware attacks continues to rise, organizations must remain vigilant and take proactive measures to protect themselves. With Lockbit leading the charge, it’s essential to be aware of the potential threats and stay up-to-date on the latest security best practices.

The recent surge in ransomware attacks serves as a reminder that cybersecurity is an ongoing battle. As threat actors adapt and evolve, organizations must also continue to innovate and improve their defenses to stay ahead of the curve.

Key Takeaways

• Ransomware attacks have increased by 47% in July compared to June.
• Lockbit has taken the lead as the most prolific ransomware gang, accounting for 62 attacks in July.
• Hiveleaks and BlackBasta are Conti’s offshoots, which have seen significant rises in attacks since June.
• The restructuring of Conti may be contributing to the surge in ransomware attacks.
• Organizations must remain vigilant and take proactive measures to protect themselves against these threats.