article thumbnail

Evolution of JSWorm ransomware

SecureList

The original version of the malware, as well as some of the subsequent “rebrandings”, e.g., Nemty, were advertised on an underground forum by a poster with the username jsworm. We will describe some notable variants of the JSWorm family encountered during the history of this malware. Technical details. May 2019: JSWorm.

article thumbnail

Ransomware world in 2021: who, how and why

SecureList

Well-known malware families are involved in the biggest and most wide-reaching campaigns. Offers with support (admittedly, more widespread in the financial malware market), usually offer regular updates and make decisions about malware updates. According to our research , this malware affected almost 20 business sectors.

article thumbnail

Ransomware by the numbers: Reassessing the threat’s global impact

SecureList

Was ransomware, in fact, a dying species of malware? In 2019, the share of users targeted with ransomware among the overall number of users that encountered malware was 3.31%; this declined slightly in 2020 to 2.67%. The share of ransomware detections among the overall number of malware detections was 1.49% in 2019 and 1.08% in 2020.