Commerce, Mich.,, February 6, 2025 / Prnewswire / – Nuspirea leading security service provider (MSSP) and a PDI technologies Company, has published its Q4 and cyber-menace report of the fourth quarter and completeproviding a complete analysis of the cyber-menace-evolving landscape. The latest report reveals a significant increase in ransomware extortion publications, a change in domination of ransomware groups and a continuous increase in exploitation attempts.
Clop ransomware increases as an actor in the upper threat
According to the report, ransomware extortion publications increased by 46% compared to Q3, with clop ransomware emerging as the most active group, exceeding Ransomhub. CLOP, known for its double extension tactics, has exploited several zero-day vulnerabilities throughout the fourth quarter, having a considerable impact on the professional and technical services industry, which has remained the most targeted sector.
“The net increase in ransomware extensions in the fourth quarter of 2024, in particular the clop, reports an alarming escalation in cybercriminal operations,” said Justin heardDirector of security operations at NUSPIRE. “”Threat actors continue to evolve their tactics, making it essential to improve their proactive threat detection capacities and their incident response strategies, and we will continue to look at this in 2025.“”
Key results of the Q4 2024 Cyber-Menace report from Nuspire
Ransomware trends
- 2,247 ransomware extortion publications were reported, an increase of 46% compared to the third quarter of 2024.
- CLOP exceeded Ransomhub as the most active ransomware group, while Kira, Funksec and Bashe entered the first five.
- Finance and insurance have become the most most targeted targeted industry, from fifth place in the third quarter of 2024.
Operate
- Operating attempts increased by 72% compared to the third quarter of 2024, with 29,180,763 operating events detected.
- Vulnerabilities of the Hikvision camera (CVE-2021-36260) and bash vulnerabilities (CVE-2014-6271) have seen significant increases in operating attempts (56% and 77%, respectively).
- Firewall and VPN technologies remain the best targets, because cybercriminals seek to circumvent the defenses of the perimeter.
Dark web trends
- The Dark Web Marketplace lists decreased by 32% compared to the third quarter of 2024, with 1,316,660 lists of gross newspapers and 590,762 credit card lists available for sale.
- Lumma Stealer, an infosteller Malware-in a persistent service (Maas), continued to prosper, collecting sensitive data for the resale on the illicit markets.
“Cybercriminals refine their attack strategies, targeting critical infrastructure and high -value data sources,” said Josh SmithMain information analyst threats at Nuspire. “Organizations must remain vigilant, employing a combination of information on AI threats, robust patch management and employee safety training to mitigate these changing risks.”
Attenuation and security recommendations
To help companies fight the latest cyber-men, nuspire recommends:
- Improve detection and response solutions (EDR) to quickly detect and contain ransomware attacks.
- Implementation of DARK web monitoring to identify identification information and compromised data before it is armed.
- Apply system -time system fixes to protect against newly discovered exploits, especially in remote access technologies.
- Strengthen training in cybersecurity awareness to reduce the risk of phishing -based ransomware infections.
Access the full online report to Cyber-menace report of the Q4 and the full year of the Nuspire and the year 2024.
On PDI security and network solutions
With more than 25 years of expertise, PDI security and network solutions (formerly known as Nuspire) redefine cybersecurity and network management by intelligent unification and unprecedented protection. The company offers fully managed security and network services, in particular the detection and response managed (MDR), the detection and response of termination points (EDR), the firewall as a service, 5G as Service and Wi-Fi as a service. The technological agnostic platform perfectly incorporates human expertise, advanced AI and innovative technologies, offering holistic visibility through security and network infrastructure. Composed of highly qualified security experts, PDI 24/7 SOCs help organizations remain ahead of emerging threats while optimizing their technological investments. Learn more about PDI security and network solutions.
For more information, contact: Claire.spahr@pditechnologies.com
Source PDI Technologies
