ransomware

Ransomware Groups Collected Less Money in 2024

Ransomware payments dropped 35% in 2024, totaling $813.55 million, due to better cyber hygiene and law enforcement actions. More organizations are opting not to pay ransoms despite an increase in attacks, aided by improved recovery strategies and incident response capabilities. Disruptions in major ransomware groups like LockBit led to decreased activity, with new actors primarily targeting smaller victims.

https://www.darkreading.com/cybersecurity-operations/ransomware-groups-made-less-money-in-2024

Crypto Ransomware 2025: 35.82% YoY Decrease in Ransomware Payments

Crypto ransom payments decreased 35% YoY in 2024. Increased law enforcement, victim resistance, and evolving ransomware tactics contributed to the decline. The total ransom received was $813.55 million, down from $1.25 billion. New strains like Akira emerged, while others faltered post-disruption. Victims favored recovery methods over payment, illustrating resilience against extortion. Understanding laundering methods is vital for law enforcement response. A shift in payment distribution patterns emerged, indicating a more complex ransomware ecosystem.

https://www.chainalysis.com/blog/crypto-crime-ransomware-victim-extortion-2025/

Lynx Ransomware Group Adds Affiliates to ‘Industrialize’

Lynx Ransomware Group expands with affiliates, offering a structured platform for cybercrime operations, including an efficient recruitment system. They provide tools and profits (80% share) for affiliates, emphasizing quality control in recruitment. Their approach combines robust ransomware builds and management, leading to a significant industrial-scale cybercrime model. Researchers recommend enhanced security measures for organizations in critical sectors to combat these threats.

https://www.darkreading.com/threat-intelligence/lynx-raas-group-industrializes-cybercrime-with-affiliate-operations

Scroll to Top