A report published by Coveware that analyzed ransom negotiation data from Q4 2021 shows ransom demands have increased, not the volume of attacks. The average ransom payment in Q4 2021 was $322,168, a 130% increase from the previous quarter. Researchers believe the increase is due to successful law enforcement action, which is causing groups to be more precise in their attacks. Joint law enforcement action across the globe has led to the arrest of several affiliates of ransomware groups, and threat actors are adjusting to protect themselves. Researchers believe that ransomware groups are avoiding large organizations that could spark international investigations. Groups are targeting mid-size companies that still generate enough revenue for a larger ransom payout. The report also stated the most exploited flaws for network entry in Q4 2021 were CVE-2021-34473, CVE-2021-26855, and CVE-2018-13379, on Microsoft Exchange and Fortinet firewall appliances.
By Akshay Rohatgi and Randy Pargman About this Student Research Project Binary Defense’s mission is