Ransomware Surges as Attempts Spike 146% Amid Aggressive Extortion Tactics

Core Insights - Zscaler's annual ThreatLabz 2025 Ransomware Report reveals a significant escalation in ransomware attacks, emphasizing the need for organizations to adopt a comprehensive Zero Trust strategy to mitigate risks [1][2]. Attack Trends - Ransomware attacks blocked in the Zscaler cloud increased by 146% year-over-year, indicating a strategic shift towards extortion over encryption [3][12]. - The total volume of exfiltrated data by major ransomware groups rose by 92%, from 123 TB to 238 TB, highlighting the growing emphasis on data theft [3][12]. Targeted Industries - The Manufacturing, Technology, and Healthcare sectors were the most frequently targeted, with 1,063, 922, and 672 attacks respectively [4][12]. - The Oil & Gas sector experienced a staggering 935% increase in ransomware attacks, attributed to increased automation and outdated security practices [5][12]. Geographic Distribution - The United States accounted for 50% of all ransomware attacks, with incidents more than doubling to 3,671, significantly surpassing other countries [6][12]. Active Ransomware Groups - RansomHub led the ransomware ecosystem with 833 publicly named victims, followed by Akira with 520 victims and Clop with 488 victims, indicating a concentration of attacks among a few groups [7][12]. - A total of 34 newly active ransomware families were identified, bringing the total tracked to 425 [8]. Security Recommendations - Zscaler's Zero Trust Exchange platform is designed to mitigate risks by preventing initial compromise, eliminating lateral movement, and blocking data exfiltration [9][13].