Ransomware Attacks Getting Quicker
The average ransomware attack now takes less than a day from first breaching a system. It's the first time average attacks can be measured in hours, though ironically it may be a sign of better defenses.
The figures comes from researchers at Secureworks, who analyze ransomware attacks. They measure dwell time, which is the period between an attacker first gaining access to a system and deploying the ransomware. That's malware which encrypts files, letting the attackers demand a fee to restore access.
The average dwell time being under a day is a dramatic development as last year the average was four and a half days.
Quick Hits Favored
The researchers cite three possible reasons for the pattern. One is that attackers are now less likely to use a "double extortion event". That's where they make a copy of data before encrypting. That means they can not only demand money to restore system access, but can also threaten to publish sensitive data online. This tactic inherently takes more time between breaching a system and encrypting the files. (Source: theregister.com)
Another reason may simply be that security software is doing a better job of detecting breaches. That gives attackers less time to move to the encryption stage. This theory may be borne out by attackers being less likely to try complex encryption that involves getting access to an entire system.
Ransomware For Hire Services Thriving
The final reason is an increase in the popularity of so-called "ransomware as a service". That's where attackers don't need to create their own malware and attack code, instead hiring what are effectively attack kits. Because these methods are much simpler than individually-crafted tools, the type of people who hire them tend to prefer quick strikes on multiple targets rather than more sophisticated attacks that take longer to carry out. (Source: secureworks.com)
The researchers also found that the majority of attacks still involve either scanning a system for unpatched security holes, or using stolen logins. Both made up around 32 percent of attacks, while around 14 percent involved getting login details through phishing emails.
What's Your Opinion?
Are you surprised ransomware scammers seem to be using a "keep it simple" mindset? Should we be concerned that attacks are getting much quicker? Should businesses and consumers put more efforts into stopping ransomware attacks or in using backups and other techniques that will reduce the impact of a successful attack?
Most popular articles
- Which Processor is Better: Intel or AMD? - Explained
- How to Prevent Ransomware in 2018 - 10 Steps
- 5 Best Anti Ransomware Software Free
- How to Fix: Computer / Network Infected with Ransomware (10 Steps)
- How to Fix: Your Computer is Infected, Call This Number (Scam)
- Scammed by Informatico Experts? Here's What to Do
- Scammed by Smart PC Experts? Here's What to Do
- Scammed by Right PC Experts? Here's What to Do
- Scammed by PC / Web Network Experts? Here's What to Do
- How to Fix: Windows Update Won't Update
- Explained: Do I need a VPN? Are VPNs Safe for Online Banking?
- Explained: VPN vs Proxy; What's the Difference?
- Explained: Difference Between VPN Server and VPN (Service)
- Forgot Password? How to: Reset Any Password: Windows Vista, 7, 8, 10
- How to: Use a Firewall to Block Full Screen Ads on Android
- Explained: Absolute Best way to Limit Data on Android
- Explained: Difference Between Dark Web, Deep Net, Darknet and More
- Explained: If I Reset Windows 10 will it Remove Malware?
![](/graphics/dennisfaas.jpg)
My name is Dennis Faas and I am a senior systems administrator and IT technical analyst specializing in cyber crimes (sextortion / blackmail / tech support scams) with over 20 years experience; I also run this website! If you need technical assistance , I can help. Click here to email me now; optionally, you can review my resume here. You can also read how I can fix your computer over the Internet (also includes user reviews).
We are BBB Accredited
![](https://www.infopackets.com/graphics/bbb.png)
We are BBB accredited (A+ rating), celebrating 21 years of excellence! Click to view our rating on the BBB.