Ransomware is an ever-evolving threat that requires constant vigilance from security teams around the globe. But the first half of 2024 has witnessed significant changes in the ransomware ecosystem, even in this already accelerated atmosphere.

In the Ransomware Radar Report, Rapid7 Labs researchers conducted independent research and analyzed data samples from Rapid7’s incident response teams to uncover trends in attacker behavior that could indicate a paradigm shift in the way these groups operate.

Among the biggest takeaways are:

• The number of active ransomware groups is increasing: There has been a 67% increase in the number of groups actively posting to their leak sites on a monthly basis.
• Medium-sized businesses are being targeted: There has been an influx of attacks on businesses making $5 million in revenue compared to their larger counterparts.
• Source-code similarities: Analysis of various ransomware source codes indicated a surprising amount of similarities between many of them, implying the potential for code sharing and/or reuse among threat actors.

Check out the Ransomware Radar Report.