Victimes d'attaques de ransomwares refusant de payer : Analyse de la chaîne

• Chainalysis a déclaré que les attaquants de ransomware ont extorqué au moins $456,8 millions aux victimes en 2022, contre $765,6 millions en 2021.
• “Much of the decline is due to victim organizations increasingly refusing to pay ransomware attackers,” said the blockchain firm.
• La plupart des fonds provenant des attaques ont été envoyés aux principaux échanges centralisés, car l'utilisation des DEX a fortement chuté. 
• La durée de vie d'une souche a également chuté, la souche moyenne restant active pendant 70 jours en 2022, contre 153 en 2021 et 265 en 2020.

---

2022 was one of the most active years for hackers and fraudsters in the crypto industry, including ransomware attackers. These attackers use a type of software, which is actually malware from cryptovirology, that completely cuts off a user’s access to their personal data or threatens to reveal that data publicly if a ransom is not paid. Interestingly, the revenue of such attackers now continues to decline as victims have started refusing to pay them. 

Selon un nouveau article de blog from blockchain data firm Chainalysis, “Ransomware attackers extorted at least $456.8 million from victims in 2022, down from $765.6 million the year before.” This positive shift in the trend confirms the fact that victims are no longer afraid of such attackers after regulators have become increasingly active in the crypto industry, cracking down on all the developers who use their skills for bad purposes. 

Chainalysis also stated that the values it has found are not true and that there are still addresses of ransomware attackers that are yet to be identified. However, the blockchain data firm noted that the money made from such attacks is significantly down. As per the firm’s belief, “much of the decline is due to victim organizations increasingly refusing to pay ransomware attackers.” 

On the other hand, Chainalysis has reported a substantial growth in the number of ransomware strains in 2022 and also cited a report by cybersecurity firm Fortinet, which claimed that more than 10,000 strains of ransomware were active in the first half of 2022. Interestingly, Chainalysis said that “on-chain data confirms that the number of active strains has grown significantly in recent years, but the vast majority of ransomware revenue goes to a small group of strains at any given time.” 

De plus, la durée de vie des ransomwares a également continué de baisser en 2022, et la souche moyenne est restée active pendant plus de 70 jours, soit plus de 50% contre 153 jours en 2021 et 265 en 2020. Fait intéressant, la société blockchain a également confirmé que les fonds réalisés via ces activités sont principalement transférés vers les principaux échanges cryptographiques centralisés. 

“The share of ransomware funds going to mainstream exchanges grew from 39.3% in 2021 to 48.3% in 2022, while the share going to high-risk exchanges fell from 10.9% to 6.7%. Usage of illicit services such as darknet markets for ransomware money laundering also decreased, while mixer usage increased from 11.6% to 15.0%,” said Chainalysis.

Chainalysis a également déclaré que la plupart du temps, ces malwares fonctionnent comme un modèle de ransomware-as-a-service (RaaS), c'est-à-dire que le développeur permet aux attaquants d'utiliser leur logiciel pour une petite partie des revenus. De plus, comme indiqué précédemment par Bitnation, la société technologique multinationale américaine Microsoft, a détecté une attaque appelée DEV-013 qui cible spécifiquement les startups cryptographiques.

Dernières nouvelles