1. Forum
  2. FidoNET
  3. CONSPRCY

  • US Treasury offers cautio

    From Mike Powell@1:2320/105 to All on Wednesday, December 10, 2025 09:13:09
    US Treasury offers cautious optimism as ransomware payments decline

    Date:
    Tue, 09 Dec 2025 16:30:00 +0000

    Description:
    The takedown of major players left a visible dent but is it too early to celebrate?

    FULL STORY

    The takedown of ALPHV and LockBit ransomware gangs made a solid dent in the overall performance of ransomware operations last year.

    This is according to the Treasury Departments Financial Crimes Enforcement Network (FinCEN) which recently said that after all-time highs in 2023, the number of ransomware infections and paid ransoms declined in 2024.

    In its Financial Trend Analysis paper, it confirmed that between 2013 and
    2021, there were 3,075 reported cases of ransomware infections, with victims paying $2.4 billion in ransom demands.

    Three key players out of the picture

    Between January 2021 and December 2024, there were 4,194 such attacks, and
    $2.1 billion in payments. 2023 was peak year. That year, around $1.1 billion exchanged hands, which was a 77% increase compared to the year before. Some
    of the most active groups at the time were ALPHV (AKA BlackCat), Akira, LockBit, Black Basta, and Phobos.

    Thats when law enforcement stepped in. Both ALPHV and LockBit were taken
    down, while Black Basta imploded after internal communications leaked. As a result, there were just 1,476 incidents in 2024 (down from 1,512 the year prior) and about $734 million in payments.

    The median ransomware payment in 2023 was $174,000, significantly more than
    the $124,097 in 2022 and $155,257 in 2024.

    The three groups that collapsed - ALPHV, LockBit, and Black Basta, raked in almost $790 million between them, during the analyzed time period. Akira,
    which is active today, was responsible for the largest number of attacks
    (376), while ALPHV and LockBit each had around 353. Financial services firms, manufacturing companies and the healthcare industry were the most targeted sectors.

    Almost all of the payments (97%) were made in Bitcoin, which the gangs sent
    to unregulated cryptocurrency exchanges and tumbling/mixing services to launder.

    Via The Record

    ======================================================================
    Link to news story: https://www.techradar.com/pro/security/us-treasury-offers-cautious-optimism-as -ransomware-payments-decline

    $$
    --- SBBSecho 3.28-Linux
    * Origin: capitolcityonline.net * Telnet/SSH:2022/HTTP (1:2320/105)