Ransomware Affiliates, Triple Extortion, and the Dark Web Ecosystem

While the dark web is often associated with drugs, crime, and leaked information, there has been a rise in a sophisticated cybercrime ecosystem that operates through platforms like Tor and illicit channels on Telegram. One aspect of this trend is the emergence of ransomware groups and their affiliates, who are employing increasingly intricate methods to extort money from companies.

According to a recent report from Unit42, ransomware attacks surged by 518% in 2021 compared to the previous year. Another report by KnowBe4 reveals that 83% of successful attacks involved Double and Triple Extortion tactics. Triple extortion is an advanced variation of double extortion, where cybercriminals threaten to expose a company’s sensitive data unless a ransom is paid.

Recently, we have noticed that groups involved in extortion are using more advanced methods. It is now uncommon for a group to only lock a company’s data with encryption. Instead, some groups are completely bypassing encryption and concentrating on stealing data and blackmailing employees.

What are single, double, and triple extortion attacks?

Single extortion attack refers to a traditional ransomware approach where a group encrypts a company’s data and demands payment to unlock it.

This article has been indexed from CySecurity News – Latest Information Security and Hacking Incidents