Ransomware breaks records in 2024: daily attacks and million-dollar payments challenge cybersecurity

Ransomware has set a record in 2024, consolidating itself as one of the main threats of cybersecurity worldwide, as reported by ESET Latin America. In the first six months of the year, more than 2,500 attacks were recorded, which is equivalent to almost 15 incidents daily, with a significant impact on the region.

Ransoms paid by ransomware victims reached 460 million dollars until Julythe highest figure being a payment of 75 million, according to data from Chainalysis. Despite efforts to dismantle groups like Lockbit, new emerging organizations have boosted activity, operating in a decentralized and flexible manner.

“Ransomware continues to evolve. Despite operations against dominant groups, the threat persists in the hands of smaller actors using advanced technology, including artificial intelligence tools,” explained Camilo Gutiérrez Amaya, head of the ESET Research Laboratory.

In Latin America, groups like LockBit 3.0, Vice Society y Medusa They maintained constant activity. The case of RansomHub stands out, an organization that offers ransomware as a service, affecting more than 200 entities since the beginning of the year. Its business model allows it to obtain 10% of the payments made by its affiliates.

One of the most notorious incidents in the region was the attack on a Mexican chain that paralyzed 1,800 stores for three months. Universities, hospitals and government agencies in countries such as Argentina, Brazil and Mexico were also targets of these cyberattacks.

The ESET report warns that ransomware groups are adopting more sophisticated tactics, such as tools that defeat EDR defense technologies. This year, the company identified the deployment of Embargo malware, which uses programs capable of disabling security systems before executing the attack.

To mitigate the impact of ransomware, ESET recommends implementing multi-factor authentication, performing regular backups, and constantly training staff in cybersecurity practices.