Ransomware gangs shift focus to big businesses

Research shows that criminals are going after more banks and corporations

Ransomware gangs are starting to shift their focus from wide-ranging campaigns to targeted attacks on large companies and banks, according to new research.

Rather than simply attempting to spread their ransomware to as many users as possible, Kaspersky Lab's annual ransomware report has revealed that cyber criminals are making a concerted effort to target big businesses.

The security firm has identified eight separate criminal groups that are targeting financial institutions and major corporations, including the Mamba group. These gangs pick their targets carefully, identify business-critical resources and wait patiently while the malware spreads, with some samples proliferating through an organisation for up to six months.

"The reason for the trend is clear," the report said; "criminals consider targeted ransomware attacks against businesses potentially more profitable than mass attacks against private users."

This tactic evidently had some merit - Kaspersky observed cases where criminals were asking for $1,000 in Bitcoin to decrypt each individual endpoint, as well as cases where the total ransomware demands for a company's infection came to over half a million dollars.

Another emerging trend the report highlighted was cyber criminals stealing each others' work. Despite the creators of the Petya ransomware building in anti-theft measures designed to prevent other hackers using it for their own ends without permission, a new strain was discovered to be doing just that.

The PetrWrap ransomware, which was discovered in March of this year, uses the Petya encryption algorithm to lock its victims files - but uses its own decryption keys, meaning that the gang behind it don't need the original authors to decrypt the files after the ransom is paid. Researchers are taking this as evidence that increased competition in the ransomware space is causing some criminals to start fighting amongst themselves for market share.

"Theoretically, this is good, because the more time criminal actors spend on fighting and fooling each other, the less organised and effective their malicious campaigns will be," the report said.

"The worrying thing here is the fact that PetrWrap is used in targeted attacks. This is not the first case of targeted ransomware attacks and unfortunately is unlikely to be the last."

Ilia Kolochenko, CEO of web security firm High-Tech Bridge, agreed that cyber crime gangs are starting to wise up and pursue more profitable targets. "The report is a clear indicator that the ransomware market is becoming more professional and mature," he said. "Actors are working on various niche specialisations to avoid direct competition and maximise their profit."

Featured Resources

The ultimate guide to business connectivity in field services

A roadmap to increased workplace efficiency

Free download

The definitive guide to migrating to the cloud

Migrate apps to the public cloud with multi-cloud infrastructure solutions

Free download

Transform your network with advanced load balancing from VMware

How to modernise load balancing to enable digital transformation

Free download

How to secure workloads in hybrid clouds

Cloud workload protection

Free download

Recommended

Maslow's Hierarchy of Needs and the workplace
Business strategy

Maslow's Hierarchy of Needs and the workplace

24 Sep 2021
Researchers disclose top flaws abused by ransomware gangs
ransomware

Researchers disclose top flaws abused by ransomware gangs

20 Sep 2021
One-in-seven Nasdaq-100 companies ranked as highly susceptible to a ransomware attack
cyber crime

One-in-seven Nasdaq-100 companies ranked as highly susceptible to a ransomware attack

16 Sep 2021
Large US businesses are hackers' ideal ransomware targets
ransomware

Large US businesses are hackers' ideal ransomware targets

7 Sep 2021

Most Popular

How to find RAM speed, size and type
Laptops

How to find RAM speed, size and type

17 Sep 2021
What are the pros and cons of AI?
machine learning

What are the pros and cons of AI?

8 Sep 2021
Best MDM solutions 2020
mobile device management (MDM)

Best MDM solutions 2020

17 Sep 2021