Ransomware Domains Up By 3,500% In Q1

  /     /     /  
Publicated : 22/11/2024   Category : security


Ransomware Domains Up By 3,500% In Q1


Cybercriminals know a good thing when they see it.



In just one quarter, researchers have observed a 35-fold jump in new domains created for ransomware. The recent surge means that ransomware-related domains now account the majority of new domains related to malware (excluding exploit kits), according to the 
new report by Infoblox
.
Infoblox partly attributes the burst of new ransomware activity -- and actors -- to the fact that it has already proven to be so successful. What has changed ... over the past quarter or two is a shift from small-money heists targeting consumers to larger, more profitable attacks on commercial entities, the report states. The biggest culprit: Locky, the ransoware that was reportedly responsible for the costly attack on a Los Angeles hospital.
Despite the huge leap in ransomware, neither it alone nor even the entire malware category account for the most malicious domains. That prize goes to exploit kits -- which beat out malware, phishing, DDoS, and data exfiltration attack-related domains for the dubious honor. Exploit kits account for nearly 50% of Infobloxs DNS Threat Index, which measures the level of malicious domain creation, excluding domain generation algorithms and sub-domain resellers.
Angler remains the top dog of the exploit kits (for seven quarters running), but RIG jumped to second place, and Neutrino, which has always hovered near the bottom of the pile, tripled its share of the EK market (18%).
Infobloxs last noteworthy finding was that much like cockroaches that scurry from the light, cybercriminals are quick to shift to a more advantageous location as needed. Meaning in this case that criminals have shifted the physical location of much of their malicious DNS infrastructure. Although the lions share continues to be in the US (though it has dropped), nearly all of the infrastructure has been moved out of Germany -- dropping from about 20%  to less than 2%. In its place, Portugal, the Netherlands, the United Kingdom, Iceland, and the Russian Federation, now collectively account for half of the malicious infrastructure. 
Related Content:
FBI Report: Deconstructing The Wide Scope Of Internet Crime 
Stupid Locky Network Breached 
Multiple Hospitals Hit In Ransomware Attack Wave
 

Last News

▸ 27 Million South Koreans Hit by Online Gaming Theft. ◂
Discovered: 23/12/2024
Category: security

▸ Homeland Security Background Checks Breach Raises Concerns. ◂
Discovered: 23/12/2024
Category: security

▸ Fully committed to the future world of technology. ◂
Discovered: 23/12/2024
Category: security


Cyber Security Categories
Google Dorks Database
Exploits Vulnerability
Exploit Shellcodes

CVE List
Tools/Apps
News/Aarticles

Phishing Database
Deepfake Detection
Trends/Statistics & Live Infos



Tags:
Ransomware Domains Up By 3,500% In Q1