Cybersecurity firm Zscaler has disclosed that the Dark Angels ransomware group secured a monumental $75 million ransom from a single victim, highlighting the growing severity of ransomware threats.
This enormous payment significantly surpasses the $40 million ransom paid by CNA Financial in 2021, setting a new record in cybercrime history. The information comes from Zscaler’s ThreatLabz 2024 Ransomware Report, which presents a bleak outlook on the current cybersecurity situation. The report reveals a 17.8% year-over-year increase in ransomware attacks, with manufacturing, healthcare, and technology sectors being the most affected.
The latest ThreatLabz report indicates a 57.81% rise in the number of companies targeted by ransomware and listed on data leak sites compared to the previous year.
Dark Angels, a relatively obscure ransomware group that appeared in May 2022, has quickly gained notoriety with this unprecedented ransom. The group uses a highly focused strategy, usually targeting one large corporation at a time. This method is in stark contrast to most ransomware groups, which tend to attack victims indiscriminately and use affiliate networks.
The Dark Angels’ tactics involve exfiltrating massive amounts of data, typically ranging from 1-10 terabytes for standard targets and 10-100 terabytes for larger enterprises. This data theft process can span several days or even weeks.
While the identity of the $75 million ransom victim remains unknown, there is speculation about possible targets. One suspect is pharmaceutical giant Cencora, ranked #10 in the Fortune 50, which experienced a cyberattack in February 2024. No ransomware group has claimed responsibility for this attack, suggesting that a ransom might have been paid.
The success of Dark Angels’ approach may inspire other ransomware groups to adopt similar high-value, targeted attacks.
The evolving nature of ransomware underscores the vulnerability of all organizations to such attacks. The massive ransom paid to Dark Angels serves as a stark reminder of the urgent need for improved cybersecurity measures across all sectors and industries.
