Recent Crypto Malware and Ransomware Attacks: What's Happening Now and How to Respond

The most recent attacks change constantly, so check the continuously updated FBI and CISA advisories at stopransomware.gov. Recent active variants include Medusa, Akira, and Gunra.

Recent attacks have hit healthcare, finance, government, and manufacturing, including the Evolve Bank & Trust breach tied to the LockBit group. That breach exposed sensitive data across many fintech partners.

Ransomware-as-a-service is a criminal business model where developers rent their ransomware to affiliates in exchange for a share of the ransom.

The FBI advises against paying, because payment does not guarantee data recovery and can encourage more attacks, and many organizations now choose not to pay.

Report ransomware to the FBI through the Internet Crime Complaint Center at ic3.gov, and review current guidance at stopransomware.gov.