Despite a law enforcement takedown six months ago, LockBit 3.0 remains the most prolific encryption and extortion ring, at least so far this year, according to Palo Alto Networks Unit 42.
How Ransomware gangs steal money and get away with it
Of the 53 ransomware groups whose underground websites, where the crooks name their victims and leak stolen data, that the incident response team monitored, only six accounted for more than half of the total infections observed.
For its analysis, the unit reviewed 42 messages posted on these crews' dedicated leak sites in the first six months of 2024 and counted 1,762 posts, representing a 4.3 percent increase over 2023.
Before we get into the top six gang victim counts, a note about how Unit 42 tracks nation-state groups and cybercrimes: It combines a modifier with a constellation. And Scorpius is the lucky constellation that Unit 42 connects to ransomware gangs. Here's the main list, plus the usual akas.
