Insights from the GRIT 2025 Q1 Ransomware & Cyber Threat Report
April 10, 2025 Ransomware continues to surge, reshaping the threat landscape.
Archive
RansomSnub: RansomHub’s Affiliate Confusion
April 8, 2025 Executive Summary Since RansomHub’s emergence in early 2024, the group has become the most prolific Ransomware-as-a-Service group operating today.
Breaking Basta: Insights from Black Basta’s Leaked Ransomware Chats
March 6, 2025 Key Takeaways During the period covered by the Black Basta leaked chat logs (18 September 2023 – 28 September 2024), we observed the following We observed at least 47 cryptocurrency wa…
Snail Mail Fail: Fake Ransom Note Campaign Preys on Fear
March 4, 2025 In early March 2025, GRIT received reports from multiple organizations regarding suspicious physical letters delivered by mail from US addresses to members of their executive team.
GRIT’s 2025 Report: Ransomware Group Dynamics and Case Studies
February 18, 2025 Ransomware threats continue evolving, with the most successful groups refining their tactics to maximize impact over the last year.
GRIT’s 2025 Report: Annual Vulnerability Analysis and Exploitation Trends
February 4, 2025 2024 saw an unprecedented surge in vulnerability disclosures, with over 39,000 vulnerabilities published.
Ongoing report: Babuk2 (Babuk-Bjorka)
January 29, 2025 Editor’s note: We will continue to provide updates as further information is forthcoming.
GRIT’s 2025 Report: Post-Compromise Detection Strategies
January 28, 2025 This blog marks the beginning of a series based on the findings in the GRIT 2025 Ransomware and Cyber Threat Report.
Unveiling the GRIT 2025 Ransomware and Cyber Threat Report
January 16, 2025 The ransomware landscape is shifting, and understanding these changes is critical to staying ahead.
RansomHub Affiliate leverages Python-based backdoor
January 15, 2025 In an incident response in Q4 of 2024, GuidePoint Security identified evidence of a threat actor utilizing a Python-based backdoor to maintain access to compromised endpoints.
To Pay or Not to Pay: The Ransomware Dilemma
November 14, 2024 Disclaimer: In the majority of cases, the determination of whether or not to pay a ransom is a business decision, and this blog is intended solely to help decision-makers navigate th…
Quarterly GRIT Ransomware Report — Q3 2024
October 17, 2024 As we wrap up the third quarter of 2024, it’s time to dive into the key takeaways from GRIT’s latest analysis on ransomware and cyber threat trends from Q3.