Cyber attacks in 2023

In the ever-evolving landscape of technology, 2023 emerged as a year marked by significant cybersecurity challenges and breakthroughs. As the digital world becomes increasingly integral to our daily lives, the sophistication and frequency of cyber attacks have escalated, pushing cybersecurity measures to the forefront of technological advancement and strategic planning. This year, we’ve seen an unprecedented wave of digital threats, from ransomware to state-sponsored attacks, each more cunning and damaging than the last.

The Rise of Ransomware: Holding Data Hostage

Ransomware attacks have not only persisted in 2023 but have also grown more sophisticated. These attacks, which involve encrypting an organization’s data and demanding payment for its release, have targeted hospitals, schools, and government agencies, among others. The impact has been profound, paralyzing critical infrastructure and exposing the vulnerabilities in our digital defenses. However, this year also marked a turning point in how these threats are countered, with a stronger emphasis on proactive measures, including advanced encryption technology and comprehensive backup strategies. In 2023 ransomware payments shattered records, soaring past the $1 billion threshold—the highest figure ever recorded. The statistics show that ransomware is an escalating problem from 2019 to 2023. This comes after a year of declining payment volumes in 2022 because of the Ukraine-Russian war where cybercrime shifted towards politically motivated cyberattacks. Chainalysis has provided a chat where we can see changes over the last years. In 2022, approximately 68% of all reported global cyberattacks involved ransomware. The last quarter of the year saw a staggering 155 million instances of ransomware attacks across the globe. By 2023, Singapore and Austria had the highest proportions of businesses impacted by ransomware, whereas the U.S. experienced the greatest volume of these attacks.

Leading Ransomware Attackers

During the first half of 2023, the most prevalent ransomware variants were BlackCat and Black Basta, each accounting for 15.5% of the market, while Royal has 10.1%. In the previous year, the Stop/Djvu Trojan was the most frequently encountered ransomware, affecting over 16% of instances. This particular Trojan targets data on Windows-operated computers, effectively locking users out. Following closely was the WannaCry ransomware, which affected 12% of global users.

New Concept for Cybercriminals, RaaS

The concept of Ransomware as a Service (RaaS) has emerged in recent times. This approach involves cybercriminals creating new ransomware and then selling the ability to use it to other individuals. This business model enables less experienced cybercriminals, referred to as affiliates, to execute their own ransomware attacks with relative ease.