Ransomware gangs shift focus to big businesses

Research shows that criminals are going after more banks and corporations

Ransomware gangs are starting to shift their focus from wide-ranging campaigns to targeted attacks on large companies and banks, according to new research.

Rather than simply attempting to spread their ransomware to as many users as possible, Kaspersky Lab's annual ransomware report has revealed that cyber criminals are making a concerted effort to target big businesses.

Advertisement - Article continues below

The security firm has identified eight separate criminal groups that are targeting financial institutions and major corporations, including the Mamba group. These gangs pick their targets carefully, identify business-critical resources and wait patiently while the malware spreads, with some samples proliferating through an organisation for up to six months.

"The reason for the trend is clear," the report said; "criminals consider targeted ransomware attacks against businesses potentially more profitable than mass attacks against private users."

This tactic evidently had some merit - Kaspersky observed cases where criminals were asking for $1,000 in Bitcoin to decrypt each individual endpoint, as well as cases where the total ransomware demands for a company's infection came to over half a million dollars.

Another emerging trend the report highlighted was cyber criminals stealing each others' work. Despite the creators of the Petya ransomware building in anti-theft measures designed to prevent other hackers using it for their own ends without permission, a new strain was discovered to be doing just that.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

The PetrWrap ransomware, which was discovered in March of this year, uses the Petya encryption algorithm to lock its victims files - but uses its own decryption keys, meaning that the gang behind it don't need the original authors to decrypt the files after the ransom is paid. Researchers are taking this as evidence that increased competition in the ransomware space is causing some criminals to start fighting amongst themselves for market share.

"Theoretically, this is good, because the more time criminal actors spend on fighting and fooling each other, the less organised and effective their malicious campaigns will be," the report said.

"The worrying thing here is the fact that PetrWrap is used in targeted attacks. This is not the first case of targeted ransomware attacks and unfortunately is unlikely to be the last."

Ilia Kolochenko, CEO of web security firm High-Tech Bridge, agreed that cyber crime gangs are starting to wise up and pursue more profitable targets. "The report is a clear indicator that the ransomware market is becoming more professional and mature," he said. "Actors are working on various niche specialisations to avoid direct competition and maximise their profit."

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now
Advertisement

Recommended

Visit/security/29204/how-can-you-protect-your-business-from-crypto-ransomware
Security

How can you protect your business from crypto-ransomware?

4 Nov 2019
Visit/analytics/30417/what-is-facebook-analytics-and-how-can-businesses-get-value-from-it
analytics

What is Facebook Analytics?

10 Jul 2020
Visit/data-centres/30952/five-business-benefits-of-hyperconvergence
data centres

Five business benefits of hyperconvergence

8 Jul 2020
Visit/security/ransomware/356292/university-of-california-gets-fleeced-by-hackers-for-114-million
ransomware

University of California gets fleeced by hackers for $1.14 million

30 Jun 2020

Most Popular

Visit/business/business-operations/356395/nvidia-overtakes-intel-as-most-valuable-us-chipmaker
Business operations

Nvidia overtakes Intel as most valuable US chipmaker

9 Jul 2020
Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/server-storage/servers/356083/the-best-server-solution-for-your-smb
Sponsored

The best server solution for your SMB

26 Jun 2020