Ransomware: A Lucrative Business Model for Hackers, says FS-ISAC

Ransomware: A Lucrative Business Model for Hackers, says FS-ISAC

A recent survey from the Financial Services Information Sharing and Analysis Center (FS-ISAC), highlighted that rapidly evolving ransomware attacks have become a primary security concern for most financial organizations. In its latest report, “The Rise and Rise of Ransomware,” the FS-ISAC stated that, “While financial institutions remain resilient to ransomware attacks, they are not immune. Ransomware is a rapidly evolving threat that financial institutions globally and in the APAC region need to be vigilant against.”


The research indicated that ransomware operators have openly claimed successful attacks against eight financial institutions globally in 2020, three of which were banks. It was found that attackers targeted third-party vendors and suppliers used by firms in Asia. The FS-ISAC suggested that even organizations with robust cybersecurity defenses are still vulnerable to ransomware threats, especially through their third-party providers.


Ransomware: A Multi-Business Model


Hackers diversified ransomware attacks by incorporating new revenue streams like:


Extorting victims by threatening to publicly name them and publish sensitive data online.
Auctioning off victims’ data to other criminals on the dark web.
Ransomware-as-a-service, where less technical criminals can buy sophisticated ransomware kits

Top Ransomware Variants


According to the report, the top five ransomware variants in the last 12 months include, Ryuk, Maze, WastedLocker, Troledesh, and Sodinokibi.


Image Courtesy: FS-ISAC

“FS-ISAC members regularly report on phishing campaigns sent to staff, including those which lead to ransomware. Ryuk largely dominated the first quarter’s notifications to FS-ISAC with 9 to 12 campaigns noted per month; however, Maze started in earnest in ..

Support the originator by clicking the read the rest link below.