{"id":12757,"date":"2023-02-05T20:27:00","date_gmt":"2023-02-05T17:27:00","guid":{"rendered":"https:\/\/alfacash.blog\/?p=12757"},"modified":"2024-02-19T21:49:58","modified_gmt":"2024-02-19T18:49:58","slug":"%e6%9a%97%e5%8f%b7%e3%83%a9%e3%83%b3%e3%82%b5%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%81%a7%e6%95%b0%e7%99%be%e4%b8%87%e3%83%89%e3%83%ab%e3%82%92%e7%a8%bc%e3%81%90%e6%a9%9f%e9%96%a2%e3%81%ab%e8%ad%a6","status":"publish","type":"post","link":"https:\/\/alfacash.blog\/ja\/2023\/02\/05\/%e6%9a%97%e5%8f%b7%e3%83%a9%e3%83%b3%e3%82%b5%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%81%a7%e6%95%b0%e7%99%be%e4%b8%87%e3%83%89%e3%83%ab%e3%82%92%e7%a8%bc%e3%81%90%e6%a9%9f%e9%96%a2%e3%81%ab%e8%ad%a6\/","title":{"rendered":"\u6a5f\u95a2\u3078\u306e\u8b66\u544a\uff1a\u6697\u53f7\u30e9\u30f3\u30b5\u30e0\u30a6\u30a7\u30a2\u304c\u6570\u767e\u4e07\u30c9\u30eb\u3092\u7a3c\u3044\u3067\u3044\u308b"},"content":{"rendered":"

Years ago, this malware was hitting millions of personal devices worldwide. A gloomy pop-up would block your screen, announcing that all your files (and even your hard drive) have been encrypted. Only the hacker has the key to decrypt them again\u2026 in exchange for a crypto payment, of course. That\u2019s ransomware, and now it\u2019s mainly affecting institutions and companies.<\/p>\n\n\n\n

According to Chainalysis, these attacks amassed $457 million in 2022<\/strong>. That\u2019s a decrease of 40% \u6bd4\u8f03<\/a> to 2021, but it\u2019s hardly good news. As more victims are refusing to pay, ransomware attacks are becoming more vicious, targeted, and expensive. The average ransomware attack<\/a> is now costing over $1 million.<\/p>\n\n\n\n

Besides, data exfiltration is now common: if the company\/organization refuses to pay, the hackers may publish or sell their private data on the Darknet. As indicated by Blackfog<\/a>, around 89% of all attacks are involving data exfiltration. This is especially bad for companies, which can lose a lot of money with their secrets.<\/p>\n\n\n\n

\"Crypto-ransomware-2022-Blackfog\"
Institutions most targeted by ransomware in 2022. By Blackfog<\/figcaption><\/figure><\/div>\n\n\n\n

So far, the most affected countries seem to be the United States, Canada, and the United Kingdom.<\/strong> At the same time, the data is mostly exfiltrated to China and Russia. For Immunefi<\/a>, around $70 million in ransomware payments were made in Bitcoin (BTC) in 2022. Other cryptocurrencies, like Ethereum<\/a> (ETH), \u30e2\u30cd\u30ed<\/a> (XMR), and several \u5b89\u5b9a\u3057\u305f\u30b3\u30a4\u30f3<\/a> were common as well.<\/p>\n\n\n\n

To cash out the gains from ransomware to institutions, the hackers use fake IDs in centralized exchanges like Binance or go to lesser-known and sanctioned platforms, such as Garantex.io. In theory, cryptocurrencies Bitcoin\u306e\u3088\u3046\u306b<\/a> can be traced, but that doesn\u2019t matter if the exchanges don\u2019t cooperate. Usually, hackers take refuge in jurisdictions where international sanctions are avoided, like North Korea, Iran, and Russia. \u00a0<\/p>\n\n\n\n

How institutions can protect against ransomware<\/strong><\/h2>\n\n\n\n

It\u2019s always important to keep the basic security measures: antivirus platform, data backups, official websites, and strong passwords<\/strong>. In addition, firms like Immunefi have made some additional recommendations.<\/p>\n\n\n\n