What This Report Covers
This edition covers the third quarter of 2023. The USA, UK and Canada remained the most targeted countries, while Brazil, Italy and Australia saw fewer attacks than in the previous quarter but were still targeted.
Key Findings of the Ransomware Trends Report Q3 2023
The report analyses over 963 ransomware events in the third quarter of 2023, spread across 68 countries.
- The United States accounted for 58.2% of events, the United Kingdom for 7.1% and Canada for 4.4%.
- Attacks fell in several countries compared with Q2, with Brazil down 70%.
- Business, professional and legal services made up 34.2% of events, manufacturing 11.5% and retail 9.2%.
- LockBit was the most active group with 160 incidents, followed by Cl0p with 152.
- July was the busiest month, with 382 attacks, mostly by Cl0p and LockBit.
- Over nine months the report shows the largest sector rise for construction, at 757.14%.
The full PDF adds profiles of Cl0p, Play, 8Base, Akira and Snatch, the quarter's important ransomware news, the most used CVEs and a section on tactics, techniques and procedures.
Business, professional and legal services made up 34.2% of incidents and manufacturing 11.5%. The report points to groups with a narrow sector focus, such as 8Base on Manufacturing and Rhysida on Education, Research and Innovation. July had the highest increase, with 382 attacks.
It is a snapshot of one quarter that readers can set beside the editions before and after it. For background on the threat type, see the ransomware glossary entry.
Business, professional and legal services carried the largest share of incidents, which is worth noting for firms in that field. The monthly figure shows when the quarter’s activity peaked.
Security professionals often struggle to keep up with evolving ransomware trends due to the constant barrage of information. We aim to help you filter this overload, present the 2023 Ransomware Trends in an understandable format, and convert this information into meaningful insights.
Exploring Ransomware Trends in Q3 of 2023: Our Comprehensive Analysis
Q3 2023 Ransomware Trends: Key Insights
- Our analysts have identified staggering ransomware incidents across 27 industry sub-sectors with devastating consequences.
- According to the data collected by our team, the USA, UK, and Canada became the most targeted countries by ransomware attacks during Q3 / 2023.
- Brazil, Italy, and Australia saw a decrease in ransomware attacks compared to the previous quarter, they continued to be the target of attacks.
- The statistical distribution of these events shows that 34.2% of them were related to business, professional, and legal services, while 11.5% of the events were in the manufacturing sector.
- Industry-specific attacks, like 8Base Group’s focus on Manufacturing and Rhyside Group‘s focus on Education, Research & Innovation suggest that some cybercriminals develop specialized techniques for exploiting vulnerabilities in certain sectors.
- The highest increase was in July, with 382 attacks.