Alphv and LockBit dethroned by smaller ransomware group in ranking

May 25, 2024
1 min read

TLDR:

  • Alphv and LockBit have lost their top spot in ransomware to a smaller group called Play in April 2024.
  • Report by GuidePoint Security shows a shift in ransomware group activity and victim volume.

Ransomware Groups Alphv and LockBit Lose Top Position to Play

In April 2024, the ransomware landscape saw a shift as Alphv and LockBit, previously dominant groups, were surpassed by a smaller group named Play. The report by GuidePoint Security delves into ransomware trends and activities of various groups. It highlights the changing dynamics in victim volume and ranks the most active groups in the ransomware space, with Play taking the lead in April.

Victim Volume Trends and Decrease in April 2024

The report also points out the decrease in total victim volume during April 2024, contrary to the usual trend of increasing victim volume year-over-year. This unexpected decline is attributed to historical patterns and law enforcement interventions disrupting ransomware operations. Smaller groups like RansomHub, Dark Vault, Ra Group, and Inc Ransom have also shown high victim volume rankings, indicating a diversification in the ransomware landscape.

Implications for Future Ransomware Activities

The report predicts that ransomware victim volume will likely remain steady or decrease in the coming months based on past trends and law enforcement actions. This projection suggests a shift in the ransomware ecosystem, with smaller groups gaining prominence and larger groups like LockBit moving down the ranks. It underlines the importance of continuous monitoring and adaptation to evolving ransomware threats in the cybersecurity landscape.

Latest from Blog

EU push for unified incident report rules

TLDR: The Federation of European Risk Management Associations (FERMA) is urging the EU to harmonize cyber incident reporting requirements ahead of new legislation. Upcoming legislation such as the NIS2 Directive, DORA, and