ricinstreams @ricinstreams - Twitter Profile

While everyone is focusing on the catastrophe of the MGM breach, it should be noted that it is business as usual for other ransomware groups. Note: Publicly listed victims on ransomware websites indicate the victim did not pay and/or negotiations are still on-going. - Cactus ransomware group was the most active this month (so far), with 30 new victims publicly displayed. Their victims are primarily agricultural and industrial organizations. - ALPHV ransomware group claims 19 new victims in September. Besides MGM, they have claimed law firms, architecture and design companies, real estate companies, physicians offices, investment companies, and media analysis companies. - Lockbit ransomware group claims 19 new victims as well. Lockbit ransomware group most notably targeted a non-profit hospital, a Behavioral health center for the mentally ill, 2 school distracts located within the United States, and law firm which represents American Veterans who need legal assistance. - CryptBB, a new and emerging group, claimed 8 victims, most notably a school district in the United States. - NoEscape claims to have compromised US-Canada water organization, the International Joint Commission, and threatens to leak sensitive government data. - BianLain attacks Save the Children International, a 104 year old non-profit which aided children who were victims of WW2 nazi concentration camps (among many other incredible deeds). - RansomedVC claims 30 new victims this month, primarily leveraging web exploitation and intimidation tactics. Other active ransomware group activity this month: RagnarLocker, Threeam, CiphBit, Trigona, Knight, Akira, Monti, Stormous, Blacksuit, Play, RansomHouse, IncRansom, Lorenz, BlackByte, Qilin, RaGroup, Everest, Mallox, Medusa, Rhysida, 8base, Abyss. In the month of September, 2023, there have been over 200 newly documented ransomware attacks. Again, this does not include victims who have paid. The most notorious groups still remain on top: ALPHV and Lockbit. Both have existed (in some manner) since at least 2019.

21

620

143

141

195K