Report: 90% of companies affected by ransomware in 2022

An annual SpyCloud survey discovered that 90% of organizations have been impacted by ransomware over the previous twelve months, an alarming improve from final 12 months’s 72.5%.

To compile the 2022 Ransomware Protection Report, SpyCloud requested over 300 people in energetic IT safety roles at U.S., UK and Canadian organizations with at the very least 500 staff to guage the specter of ransomware, in addition to their firms’ cyber readiness, over the previous 12 months.

Their insights present that whereas firms have activated to strengthen their cybersecurity postures throughout the board in gentle of the elevated menace of ransomware, criminals have gotten extra refined, leveraging gaps in safety to perpetrate assaults.

Regardless of elevated funding in cybersecurity, over the previous 12 months, the relentless tide of ransomware continued to disrupt operations and put organizations’ knowledge in danger. Furthermore, organizations have been extra probably than final 12 months to be impacted greater than as soon as: 50% have been hit at the very least twice, 20.3% have been hit between 6 and 10 occasions and seven.4% have been attacked greater than 10 occasions.

The rising prevalence of repeat assaults is a sign that well-liked strategies reminiscent of knowledge backups –– which respondents noticed as their most necessary ransomware countermeasure –– nonetheless depart delicate knowledge uncovered. As soon as an assault has occurred, retrieving misplaced knowledge doesn’t forestall attackers from sharing it on the darkish net, permitting criminals to make use of it for future nefarious actions, together with their subsequent assault.

Malware hits safety protection gaps

Malware preparedness additionally represents a significant hole in organizations’ defenses. IT safety groups face a near-total lack of visibility into malware infections on unmanaged units used to entry work functions or accounts. Based on 87% of respondents, reviews of credential-stealing malware reminiscent of RedLine Stealer have elevated the concentrate on unmanaged private units as a possible entry level for ransomware.

Their issues are well-founded: Malware infections are extra widespread than firms could notice. Via evaluation of botnet logs recaptured this 12 months alone, SpyCloud researchers recognized over 6 million malware-infected units with software credentials siphoned.

Whereas the report indicated organizations are making strides towards higher prevention –– those who applied or plan to implement multifactor authentication almost doubled to 96% from 56% final 12 months –– the report’s findings present that closing key gaps round uncovered knowledge and malware is important to creating a dent within the battle towards ransomware.

Learn the total report from SpyCloud.