Summary: A significant decline in ransomware extortion payments has been observed, dropping from .25 billion to 2.55 million, mainly in the second half of the year. This change is attributed to disruptions in the ransomware ecosystem, particularly targeting major groups like LockBit and AlphV/BlackCat. Despite the positive trend, experts warn that the situation remains fragile, as vulnerabilities and attacks continue to pose threats.

Affected: Ransomware victims, cybersecurity sector, law enforcement agencies

Keypoints :

• Ransomware payments decreased by approximately 35%, with total payments falling significantly in the latter half of the year.
• Disruptions by law enforcement targeting major ransomware groups have contributed to the decline and chaos within the cybercriminal ecosystem.
• Victims are increasingly choosing not to pay ransoms due to loss of trust and better preparedness against attacks.
• Despite the decline, vulnerabilities remain, and critical infrastructure sectors like hospitals and schools continue to face threats from ransomware attacks.