The first quarter of 2024 began with a 22 percent decrease in the number of ransomware attacks worldwide compared to the previous year.

The first quarter of 2024 saw a decline in the number of ransomware attacks worldwide. The figures from a report by Cyberint show that the number of ransomware incidents fell to 1,048 in the first quarter of 2024, a decrease of 22 percent compared to the fourth quarter of 2023. Cyberint cites two possible causes that could trigger the outbreak explain the current declines, namely the decline in law enforcement and ransom demands.

Influence of law enforcement

The largest cyber groups worldwide are LockBit3.0, Blackbasta and The Play Group. LockBit3.0 claims to have 213 new victims, with 20.6 percent of cases involving ransomware.

The decline in cyberattacks this year could be due to tougher law enforcement raising the bar for cybercriminals. The actions against the largest cyber company LockBit may also play a role here. For a while, the infamous hacking group appeared to have been dismantled, but not long after, the hackers were back in control.

Decrease in ransom payments

Another possible explanation could be a decrease in ransom payments, according to Cyberint. Since victims are less likely to pay ransoms, threat actors must look for other ways to generate revenue.

Finally, Cyberint assumes that new groups such as RansomHub, Trisec or Slug have not yet joined and cannot yet cover the current decline. These groups are still evolving to improve their skills and will become more important in the future.