Kaspersky statistics confirm the growth of ransomware

Published: Friday, 06 May 2016 08:18

According to Kaspersky Lab’s Q1 malware report, the company’s experts detected 2,900 new malware modifications during the quarter, an increase of 14 percent on the previous quarter. Kaspersky Lab’s database now includes about 15,000 ransomware modifications, and the number continues to grow.

In the first quarter of 2016, Kaspersky Lab security solutions prevented 376,602 ransomware attacks on users, 17 percent of which targeted the corporate sector. The number of attacked users increased by 30 percent compared to Q4, 2015.

One of the most famous and widespread ransomware in Q1, 2016 was Locky. Kaspersky Lab products detected attempts to infect users with this Trojan in 114 countries, and as of early May 2016, it remains active. Another ransomware called Petya was interesting from a technical perspective because of its ability to not only encrypt data stored on the computer, but also to overwrite the hard disk drive's master boot record (MBR), leaving infected computers unable to boot into the operating system.

According to Kaspersky Lab detections, the top three ransomware families in Q1 were: Teslacrypt (58.4 percent), CTB-Locker (23.5 percent) and Cryptowall (3.4 percent). All three propagate mainly through spam emails with malicious attachments or links to infected web pages.