Threat Trend Report on Region-Specific Ransomware
Contents
- Background
Currently, ransomware creators include individuals, cyber criminal gangs and state-supported groups. Out of these individuals and groups, cyber criminal gangs are the most proactive in ransomware development, while individuals and state-supported groups are less so. Privately developed ransomware is most often for research purposes with the intention of destroying data. Some state-sponsored threat groups also develop ransomware. The purpose of these cases is not for financial gain either but for data destruction, and Wipers, which do not allow recovery, are created disguised as ransomware.
Some ransomware gangs do not attack medical institutes or social infrastructures. This could be due to social criticism and to avoid drawing attention from legal authorities. To avoid the surveillance of regional law enforcement, these threat actors also design ransomware to not function in systems in specific regions.
As the ransomware industry grew, cyber criminal gangs could not undertake all the tasks by themselves. So, they operate …
Currently, ransomware creators include individuals, cyber criminal gangs and state-supported groups. Out of these individuals and groups, cyber criminal gangs are the most proactive in ransomware development, while individuals and state-supported groups are less so. Privately developed ransomware is most often for research purposes with the intention of destroying data. Some state-sponsored threat groups also develop ransomware. The purpose of these cases is not for financial gain either but for data destruction, and Wipers, which do not allow recovery, are created disguised as ransomware.
Some ransomware gangs do not attack medical institutes or social infrastructures. This could be due to social criticism and to avoid drawing attention from legal authorities. To avoid the surveillance of regional law enforcement, these threat actors also design ransomware to not function in systems in specific regions.
As the ransomware industry grew, cyber criminal gangs could not undertake all the tasks by themselves. So, they operate …