Ransomware Hackers Look for New Tactics Amid Falling Profits

Ransomware profits are falling, forcing cybercriminals to adopt new tactics and target different victims.

The percentage of victims paying ransoms dropped below 25% for the first time, and ransom amounts decreased sharply.
Larger organizations are less likely to pay ransoms, leading to fragmentation of the ransomware landscape and more attacks on midsize organizations.
New tactics include:
- Recruiting or bribing insiders, especially at large, high-value organizations.
- Social engineering helps desks and launches supply chain attacks.
- Callback phishing, manipulating victims through real-time phone negotiation.
Sending personalized ransom demands using compromised or fake email accounts.
Smaller ransomware groups are more active, resulting in unpredictable targets, including regions and sectors previously less affected.
Enterprises are urged to strengthen their insider threat programs amid increasing efforts by hackers to recruit insiders.