May 22, 2024 at 07:03AM
After the takedown of LockBit in February, rival gang Play has surpassed it in attacks, marking a shift after eight months of LockBit dominance. Law enforcement’s disruption claims seem validated as LockBit’s attacks drop significantly. Global ransomware activity decreased by 15% month-on-month, with North America and Europe remaining the top targets. New malware testing may increase in developing nations.
Based on the meeting notes, here are the key takeaways:
1. The takedown of LockBit in February has allowed rival gangs like Play to overtake it in terms of ransomware attacks following an eight-month period of LockBit topping the charts.
2. The National Crime Agency-led takedown of LockBit seems to have been successful, as the gang’s attack numbers reduced significantly after the takedown operation and the unmasking of their leader.
3. NCC Group’s findings indicate that LockBit had been reposting attacks on organizations it had targeted before the disruption operation to maintain appearances, suggesting limited capacity.
4. Global ransomware activity has decreased by 15 percent month-on-month, attributed to the takedown of LockBit and increased AI adoption by cybercriminals.
5. Despite the success against major groups like LockBit, there is a need for continued efforts to protect against cyber threats, as new and equally malicious threat actors are emerging.
6. North America and Europe remained the most targeted continents by ransomware, with North America enduring 58 percent of the global total, followed by Europe with 35 percent. There is a possibility of a growing proportion of attacks in developing nations in the future.
These takeaways provide a clear understanding of the impact of the LockBit takedown and the evolving landscape of ransomware threats globally.