Barracuda’s Ransomware Review of 2023/24: Healthcare Remains Top Attack Target

Barracuda Networks has recently published its annual Threat Spotlight on ransomware, revealing some alarming statistics about the current threat landscape in 2023/24. According to their research, healthcare organizations remain the top target for ransomware attacks, accounting for 21% of reported incidents, an increase from the previous year.

The study analyzed 200 reported incidents involving 37 countries and 36 different ransomware groups, with healthcare being the most vulnerable sector. Manufacturing and technology companies also faced significant threats, with 15% and 13% of reported attacks respectively.

One of the key findings of the report is that lateral movement is the most common sign of a ransomware attack, with 44% of incidents being detected during this phase. Additionally, 25% of incidents were identified when attackers started writing or editing files, and 14% were exposed by suspicious behavior that didn’t align with known activity patterns.

The report also highlighted the prevalence of Ransomware-as-a-Service (RaaS) models, with groups like LockBit, ALPHV/BlackCat, and Rhysida being responsible for a significant portion of attacks. These ransomware groups often rent out their services, making it harder for security teams to detect and contain the attacks.

Adam Khan, VP of Global Security Operations at Barracuda Networks, emphasized the importance of multiple detection layers and AI-powered defenses to combat ransomware threats effectively. He also recommended robust authentication, access policies, patching, and security awareness training for employees to minimize the impact of attacks.

In conclusion, the ransomware threat landscape is constantly evolving, and organizations need to stay vigilant and implement proactive measures to protect themselves from cyber threats. The findings of Barracuda’s research serve as a wake-up call for businesses to prioritize cybersecurity and invest in advanced defense mechanisms to safeguard their sensitive data.