November 2024 Threat Trend Report on Ransomware

November 2024 Threat Trend Report on Ransomware

This report provides statistics on the number of new ransomware samples, number of targeted systems, and targeted companies collected in November 2024, as well as major Korean and international ransomware issues worth noting. Below are the summarized details.

The number of ransomware samples and number of damaged systems is based on the detection names assigned by AhnLab, and statistics on targeted companies is based on the information published on the Dedicated Leak Site (DLS) of the ransomware group, also referred to as ransomware PR sites or PR pages, collected by the ATIP infrastructure over time.

 

 

Overall Ransomware Statistics

 

The total number of new ransomware samples collected during the past six months is as follows.


The number of new samples collected in November was slightly lower in comparison to the figures in October, and this is because the MedusaLocker ransomware, which ranked 2nd place in October, was not included in the rankings. Other malware with new samples in November will be discussed in more detail in the section ‘3. New Samples by Ransomware’.

 

 

Targeted Businesses by Ransomware Group

 

Below are the statistics on targeted businesses posted on the ransomware groups’ DLS collected by ATIP. As data on some ransomware groups were collected late or could not be collected by ASD, the report also refers to the table “Targeted businesses by ransomware group (external statistics)” that follows.


Some of the targeted businesses revealed per ransomware group are as follows.


 

MD5

146d350fd6271b4411714c630d8cda87
14a0ecf45aa72adb2b1f2ccca99f6faa
30656c737338818bee8cc3591e3f3dcc
31a77e0d1c1b91eebec1f7cdcc1ab8b8
571684f28ce1cf4d8236dbd46ef6f7f0