Unregulated crypto fueling ransomware attacks globally: Report

by IANS |

New Delhi, Nov 22 (IANS) Fueled by cryptocurrencies, ransomware was involved in 79 per cent of the global cybersecurity incidents in the last 18 months of pandemic, led by Conti and REvil ransomware attacks, a new report showed on Monday.

Cryptocurrency will continue to fuel cybercrimes such as ransomware and malicious cryptomining, and the trend will continue until global cryptocurrencies are better regulated, according to researchers from global cyber security firm Sophos.

Over the coming year, the ransomware landscape will become both more modular and uniform, with attack "specialists" offering different elements of an attack "as-a-service" and providing playbooks with tools and techniques that enable different adversary groups to implement very similar attacks.

Some of the most high-profile ransomware attacks of the year involved ransomware-as-a-service (RaaS), including an attack against Colonial Pipeline in the US by a 'DarkSide' affiliate.

An affiliate of Conti ransomware leaked the implementation guide provided by the operators, revealing the step-by-step tools and techniques that attackers could use to deploy the ransomware.

"Ransomware thrives because of its ability to adapt and innovate," said Chester Wisniewski, principal research scientist at Sophos.

"In 2021, RaaS developers are investing their time and energy in creating sophisticated code and determining how best to extract the largest payments from victims, insurance companies, and negotiators," Wisniewski said in a statement.

During 2021, Sophos researchers uncovered cryptominers such as Lemon Duck and the less common, MrbMiner, taking advantage of the access provided by newly-reported vulnerabilities and targets already breached by ransomware operators to install cryptominers on computers and servers.

The use of multiple forms of extortion by ransomware attackers to pressure victims into paying the ransom is expected to continue and increase in range and intensity, the report noted.

"It is no longer enough for organisations to assume they're safe by simply monitoring security tools and ensuring they are detecting malicious code," said Wisniewski.

Latest News
Sensex crosses 74K mark in 1000 points rally Thu, Mar 28, 2024, 03:42 PM
Man stabbed to death during fight over drinking water Thu, Mar 28, 2024, 03:41 PM
Actor Mukesh, BJP candidate Ashwini file nominations in Kerala Thu, Mar 28, 2024, 03:22 PM
Gillespie resigns from his role as South Australia, Adelaide strikers' head coach Thu, Mar 28, 2024, 03:15 PM
'No scope for individuality in party', Karnataka DyCM Shivakumar warns warring leaders Thu, Mar 28, 2024, 03:10 PM
Ukrainian FM arrives in India to build on talks between PM Modi, Volodymyr Zelenskyy Thu, Mar 28, 2024, 03:02 PM
Political conspiracy, claims Kejriwal while being taken to Rouse Avenue Court Thu, Mar 28, 2024, 02:47 PM
NXP Semiconductors unveils industry-first platform for software-defined vehicles Thu, Mar 28, 2024, 02:41 PM
CM Vijayan & CPI(M) tread cautiously after ED case against Veena Vijayan Thu, Mar 28, 2024, 02:37 PM
IPL 2024: 'They opened for Australia...', says Ganguly on DC's opting for Warner, Marsh as opening pair vs PBKS Thu, Mar 28, 2024, 02:28 PM
India's trade policy is calibrated with economic growth path: Piyush Goyal Thu, Mar 28, 2024, 02:17 PM
Holi brings cheer to UP excise dept as sales soar Thu, Mar 28, 2024, 02:11 PM
Punjab CM Bhagwant Mann blessed with baby girl Thu, Mar 28, 2024, 02:10 PM
New AI tool can predict fatal heart rhythm with 80 pc accuracy Thu, Mar 28, 2024, 12:41 PM
IPL 2024: 'Perplexed, beyond my understanding', Smith, Pathan slam Hardik's tactics of using Bumrah vs SRH Thu, Mar 28, 2024, 12:27 PM