- The amount of money paid to ransomware attacks decreased by 2024, the report states
- A total of $ 813.55 million was paid, compared to more than $ 1.2 billion in 2023
- It is unlikely that even those who pay the rescue recover their data as a whole
Any person who works in security will be very familiar with the growing dangers of ransomware and their disastrous consequences, but a new investigation of the chain analysis has affirmed that 2024 really saw a 35% interannual decrease in the number of companies that paid the rescue .
According to reports, ransomware attacks reached a new maximum in 2024, but the revenues of ransomware attackers received for the first time since 2022. That said, the numbers are still quite eye.
Between January and June 2024, the chain channeling reported a loss of victim of $ 459.8 million for rescue payments, which was actually 2.38% higher than the same period in 2023. However, this slowed down in the Next period, and the total of 2024 reached $ 813.55 million, compared to 2023. Amazing $ 1.25 billion.
New rescue guidelines
There are some probable reasons for this. As cybersecurity teams develop their tactics and adapt to threats, alternatives have been developed to pay blind rescue. For example, the United Kingdom Government has launched proposals for the protection of ransomware that includes a prohibition of rescue payments for public services, aimed at determining criminals and interrupting the source of income of the attackers.
The research has shown that those who pay the rescue is not even particularly likely to recover their data, with only approximately 7% recover their information, which will undoubtedly take into account the response of incidents for many organizations.
“According to our data, about 30% of the negotiations actually lead to payments or the victims who decide to pay the bailouts. In general, these decisions are taken according to the perceived value of the data that have been specifically committed, “said Dan Saunders, Incident Response Director at Kivu Consulting.
Of course, as more companies experience this, already measure that more security equipment develops their tactics against cyber attacks, defenses against ransomware improve. Cybersecurity and cyber attacks constantly evolve, so the future is unpredictable.
“For years, the cybersecurity landscape seemed to rush towards a so -called ransomware apocalypse,” says Jacqueline Burns Koven, chief of intelligence of cyber threats in the chain chain “, so this acute decrease, at even lower levels than Those of 2020 and 2021 speaks to the effectiveness of the actions of application of the law, a better international collaboration and a growing negative by the victims to yield in the demands of the attackers. “
