This report covers critical ransomware statistics and trends, major attacks, and common Tactics, Techniques, and Procedures (TTPs) observed by Cyble Research Labs in Q1-2022.

The quarter saw a net decline in ransomware attacks compared to Q4-2021. The report investigates the impact of the Russia-Ukraine conflict on ransomware operations, particularly how high-profile ransomware Threat Actors are getting involved on both sides of the conflict. We also discuss trends we have observed such as ransomware groups rebranding themselves to avoid potential legal action.

Our analysis indicates that given the increased scrutiny on ransomware groups from Law Enforcement Agencies, we may see an increase in ransom amounts and a decrease in overall ransomware activities.