[SoW] W4 Sep | EN | Story of the week: Ransomware on the Darkweb

Hotsauce | S2W TALON

SoW (Story of the Week) publishes a report summarizing ransomware’s activity on the Darkweb. The report includes summary of victimized firms, Top 5 targeted countries and industrial sectors, status of dark web forum posts by ransomware operators, etc.

1. Weekly Status

• A total of 37 victim companies were mentioned on ransomware leak sites based on 10 attack groups that had been updated in the past week
• HQ of ransomware victim companies is the highest in the United States, accounting for 62.2% of the total victimized companies
• Among all ransomware attack groups, Conti accounted for 51.4% of the activity, showing the highest activity

1.1. TOP 5 targeted countries

1. USA — 62.2%
2. Germany & Italy — 8.1%
3. Others — 2.7%

1.2. TOP 5 targeted industrial sectors

1. IT & Service — 16.2%
2. Healthcare & Manufacturer — 10.8%
3. Law & Others — 5.4%
4. Others — 2.7%

1.3. TOP 5 Ransomware

1. Conti — 51.4%
2. BlackByte — 18.9%
3. Groove — 8.1%
4. Vice Society — 5.4%
5. Others — 2.7%

• Homepage: https://www.s2w.inc
• Facebook: https://www.facebook.com/S2W
• Twitter: https://twitter.com/S2W_Official