CYFIRMA Research

CYFIRMA Research- Tracking Ransomware: March 2025

CYFIRMA

Stay ahead of evolving ransomware threats with CYFIRMA’s Monthly Ransomware Report – March 2025. 

The month of March saw shifting dynamics, with Safepay experiencing a huge surge of 223%, while RansomHub and Akira declined. Babuk2 has possibly leveraged fake extortion claims. Manufacturing, IT, and Consumer sectors remained prime targets as total incidents dropped 30.7% from February. The U.S. led victim counts, followed by Germany and Canada. Notably, Black Basta’s automated brute-force tool BRUTED, Qilin’s use by North Korean APTs, and Akira’s IoT exploitation underscored evolving tactics.

New custom malware like Betruger, Medusa’s BYOVD attack, and multi-OS ransomware like Albabat highlight growing sophistication. Emerging groups like Mora_001 and threats like Arkana and RALord further complicate the threat landscape. 

Link to the Research Report: https://www.cyfirma.com/research/tracking-ransomware-march-2025/

#Ransomware #ThreatIntelligence #DigitalResilience
#ThreatLandscape#StaySecure #CyberSecurity #RansomwareReport #ThreatIntelligence #Ransomware #DigitalDefense #CYFIRMA #ETLM #RansomHub #BlackBasta #Clop #USA #Manufacturing #CyfirmaResearch #ExternalThreatLandscapeManagement #Arkana #RALord

https://www.cyfirma.com/