PRESS RELEASE

Boston, MA – January 24, 2023 – Black Kite, the leader in third-party cyber risk intelligence, today unveiled the industry's first monthly ransomware dashboard, featuring crucial insights for security teams, media, analysts, and other industry leaders. The resource provides data, graphs, trends, and key insights from Black Kite’s threat intelligence team about the top ransomware groups, their victims, and attack patterns. Black Kite also analyzes the top ransomware indicators to identify common vulnerabilities exploited by active ransomware groups, and using data and machine learning, Black Kite’s Ransomware Susceptibility Index (RSI) paints a comprehensive picture of the industry-specific cyber-risks that organizations face each month.

In December alone, the research team monitored over 360 victims. The most common indicators of compromise were MX and DNS misconfigurations that allowed for spoofing and phishing attacks (266) and in-use services and products with vulnerabilities of high exploitability (233). Additionally, 49% of victims had open RDP or SMB ports publicly visible. Research also revealed that although LockBit continues to dominate the landscape, an emerging ransomware group, WereWolves, entered the top three for the first time. 

"Since recently entering the scene, the WereWolves ransomware group has targeted 26 victims in the U.S., Europe, and Russia," said Ferhat Dikbiyik, head of research at Black Kite. "The group is unusual because it has a full-fledged website that recruits new members and offers a bounty program for security vulnerabilities. It is also unusual to see ransomware groups targeting Russian companies, which we have only witnessed before from short-lived ransomware groups."

The monthly dashboard has surfaced trends over the past six months, including: 

"Ransomware gangs are constantly evolving their tactics, and are operating at growing scales in order to get bigger profits from their victims," said Dikbiyik. "As there is no sign of these attacks slowing down, it’s important to understand these gangs' motivation and actions in order to have smarter security strategies to prevent attacks. This is why we have created a free resource and will continue to monitor the landscape for trends with industry-wide impact."

As these groups become more sophisticated, it is imperative that companies understand their risk and are armed with the tools to make informed decisions about their security strategies. Black Kite’s monthly report dashboard provides critical visibility to help connect the dots between ransomware groups’ patterns and their victims so that the bad actors are no longer operating in the shadows. 

To see Black Kite’s latest ransomware data, visit the December report landing page, or view data from the last six months on the Ransomware Reports page.

About Black Kite

Black Kite gives companies a comprehensive, real-time view into cyber ecosystem risk so they can make informed risk decisions and improve business resilience while continuously monitoring more vendors, partners, and suppliers in an ever-changing digital landscape.

Through an automated process, and a combination of threat, business and risk information, Black Kite provides cyber risk intelligence that goes beyond a simple risk score or rating.

Black Kite serves more than 1,500 customers in a wide range of industries and has received numerous industry awards and recognition from customers.

Learn more at www.blackkite.com, on the Black Kite blog.

Copyright © 2023 Black Kite, Inc. All rights reserved. All other brand names, product names, or trademarks belong to their respective holders.