{"id":11471,"date":"2025-02-05T13:02:49","date_gmt":"2025-02-05T13:02:49","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=11471"},"modified":"2025-02-05T13:02:49","modified_gmt":"2025-02-05T13:02:49","slug":"ransomware-payments-fell-35-in-2024-as-more-victims-refuse-to-pay-chainalysis","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=11471","title":{"rendered":"Ransomware Payments Fell 35% in 2024 as More Victims Refuse to Pay: Chainalysis"},"content":{"rendered":"
\n

The ransomware business took a hit in 2024, with payments falling 35% year-over-year, according to a new report <\/a>from Chainalysis.<\/p>\n<\/p>\n

Though the number of ransomware attacks increased in 2024, ransomware gangs made less money, pulling in $814 million compared to 2023\u2019s record-high sum of $1.25 billion. The blockchain analytics firm attributes the decline to a variety of factors, including an uptick in law enforcement actions and sanctions, as well as a growing refusal by victims to pay their attackers.<\/p>\n<\/p>\n

Last year, less than half of all recorded ransomware attacks resulted in victim payments. Jacqueline Burns Koven, Chainalysis\u2019 head of cyber threat intelligence, told CoinDesk that part of the non-payment trend can be attributed to a growing distrust that complying with attackers\u2019 demands will actually result in victims\u2019 stolen data being deleted from the attacker\u2019s possession.<\/p>\n<\/p>\n

In February 2024, American insurance company United Healthcare paid a $22 million ransom to Russian ransomware gang BlackCat after one of its subsidiaries was breached and patient data exposed. But BlackCat imploded shortly after the ransom was paid, and the data United Healthcare had paid to protect was leaked. Similarly, the takedown of another Russian ransomware gang, LockBit, by U.S. and U.K. law enforcement in early 2024 also revealed that the group did not actually delete victims\u2019 data as promised.<\/p>\n<\/p>\n

\u201cWhat it illuminated is that payment of a ransom is no guarantee of data deletion,\u201d Koven said.<\/p>\n<\/p>\n

Koven added that, even if ransomware victims wanted to pay, their hands are often tied by international sanctions<\/a>.<\/p>\n<\/p>\n

\u201cThere’s been a spate of sanctions against different ransomware groups and for some entities, it’s outside of their risk threshold to be willing to pay them because it constitutes sanctions risk,\u201d Koven said.<\/p>\n<\/p>\n

Chainalysis\u2019 report points to one other reason for decreased payments in 2024 \u2013\u00a0victims are wising up. Lizzie Cookson, senior director of incident response at Coveware, a ransomware incident response firm, told Chainalysis that, due to improved cyber hygiene, many victims are now better able to resist attackers\u2019 demands.<\/p>\n<\/p>\n

\u201cThey may ultimately determine that a decryption tool is their best option and negotiate to reduce the final payment, but more often, they find that restoring from recent backups is the faster and more cost-effective path,\u201d Cookson said in the report.<\/p>\n<\/p>\n

Challenges to cashing-out<\/p>\n<\/p>\n

Chainalysis\u2019 report also suggests that ransomware attackers are also struggling with cashing-out their ill-gotten gains. The firm found a \u201csubstantial decline\u201d in the use of crypto mixers in 2024, which the report attributed to the \u201cdisruptive impact of sanctions and law enforcement actions, such as those against Chipmixer, Tornado Cash, and Sinbad.\u201d<\/p>\n<\/p>\n

Last year, more ransomware actors simply held their funds in personal wallets, according to the report.<\/p>\n<\/p>\n

\u201cCuriously, ransomware operators, a primarily financially motivated group, are abstaining from cashing out more than ever,” it said. “We attribute this largely to increased caution and uncertainty amid what is probably perceived as law enforcement\u2019s unpredictable and decisive actions targeting individuals and services participating in or facilitating ransomware laundering, resulting in insecurity among threat actors about where they can safely put their funds.”<\/p>\n<\/p>\n

Looking forward<\/p>\n<\/p>\n

Despite the clear impact of law enforcement\u2019s crackdown on ransomware gangs last year, Koven stressed that it\u2019s too early to say whether the downward trend is here to stay.<\/p>\n<\/p>\n

\u201cI think it is premature to be celebrating, because all the factors are there for it to reverse in 2025, for those large attacks \u2014 the big game hunting \u2014 to resume,\u201d Koven said.<\/p>\n<\/p>\n

You can read the full report here<\/a> on Chainalysis\u2019 blog.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

The ransomware business took a hit in 2024, with payments falling 35% year-over-year, according to a new report from Chainalysis. Though the number of ransomware attacks increased in 2024, ransomware gangs made less money, pulling in $814 million compared to 2023\u2019s record-high sum of $1.25 billion. The blockchain analytics firm attributes the decline to a […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-11471","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/11471","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11471"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/11471\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11471"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11471"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11471"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}