Austria records 2,243 cyberattacks per week, surpassing the European average of 2,003 by 12 percent, while ransomware attacks increased year-over-year by 33 percent.
The Gentlemen, a ransomware group founded in early 2025 with access to 14,000 compromised FortiGate devices, has risen to become the world’s most active extortion group with a 17 percent market share.
Anubis attackers follow identifiable patterns during initial access that can be detected early through monitoring of CVE exploitation and remote tool abuse.
Ransomware attacks increased by 236 percent in 2025, with new actors like Qilin and Akira taking the lead, and Germany among the most affected countries worldwide with 433 cases.
The U.S. Department of the Treasury sanctions a VPN provider for the first time for systematically supporting ransomware groups and other cybercriminals.
Without isolated, immutable and strictly controlled backups, 84.5 percent of attacked companies do not pay ransom and still recover, while paying companies fail 8–33 percent of the time and face additional insurance and sanctions risks.
An insider from the IT security industry exploited his position as a negotiator to spy on companies and optimize BlackCat extortions — two accomplices also received four-year prison sentences.
GigaWiper combines three known malware families (Crucio, FlockWiper) in a modular backdoor with 20 commands to delete or encrypt data after reconnaissance objectives are achieved.
Ransomware groups are forming cartel-like alliances with specialized division of labor, increasing their efficiency and making detection more difficult.
