The ransomware market is a segment that generates profits in the hundreds of millions of dollars for criminals. Even with payment numbers falling in 2022, compared to previous years, we are still talking about an extremely profitable and also harmful type of digital scam, which increases the probability of payment. Another proof of this are the numbers accumulated by the most active gangs in recent years.
The ranking features well-known names of those who follow digital security news. The most recent, including, was released this weekend by the United States government and placed the LockBit group as the third that had more profits with the payment of ransoms, with more than US$ 90 million obtained over the last three years.
In first place among the gangs that profited the most from ransomware is the Ryuk gang, with US$ 150 million. She was responsible for prominent coups such as the one received by the city of New Orleans, in the USA, or by the Brazilian cash transport company Prosegur; in both cases, complete stoppages in operations were required.
Already in second is REvil, which between its comings and goings, has accumulated more than US$ 123 million. Of supposedly Russian origin, the ransomware-as-a-service operation targeted the food multinational JBS and also carried out attacks against celebrities such as Madonna and Donald Trump. One of the most notorious actions, however, was the hit against the supply chain of software supplier Kaseya, considered one of the biggest of its kind in the history of the internet.
Check out the list compiled by InCyber, based on public reports released by government agencies and digital security companies:
- Ryuk: US$ 150 million;
- REVIL: US$ 123 million;
- lockbit: US$ 91 million;
- Darkside: US$ 90 million;
- Maze/Egregor: US$ 75 million;
- Cuba: US$ 43,9 million;
- Accounts: US$ 25,5 million;
- network walker: US$ 25 million;
- Dharma: $24 million.
