Threat Monitor Annual Report 2023

Blackcat

Figure 20: Total BlackCat Attacks Month-on-Month 2022 vs 2023

Following on from their activity levels in 2022, BlackCat/ALPHV remains the second most active ransomware threat group of 2023 (when considering LockBit 2.0 and LockBit 3.0 as one evolved entity instead of two separate ones). Their activity spiked over 100% from their activity levels last year, rising from 215 attacks in 2022 to 433 attacks in 2023. This more than doubling of attacks in real terms also represents an increase in BlackCat’s proportional share in the total ransomware attack volume, though only minorly from 8.5% share of the total in 2022 to just over 9% of the total in 2023.

BlackCat displayed a consistently high activity level throughout 2023, only missing being in the top three most active threat groups in four months of the year, though in those four months they were the fourth most active threat group. Though not as dominant, and with attack volumes still less than half of, LockBit BlackCat have shown a consistent level of activity throughout the year until experiencing a dip in activity in December. This can likely be attributed to the temporary disruption which BlackCat/ALPHV’s leak site experienced in early December.

46

Made with FlippingBook - PDF hosting