Ransomware encryption down amid surge of attacks, Microsoft says

Microsoft’s Digital Defense Report (June 2022–July 2023) notes a large increase in ransomware-related attacks but fewer incidents reaching encryption due to improved disruption and recovery tools. The report highlights overlap between nation-state and criminal activity—Russian-linked APTs (Storm-2049, Storm-0593/Gamaredon) using commodity malware and espionage tactics against Ukrainian military targets, Iranian and North Korean actors monetizing access and data (including FakePenny), and ongoing data-extortion and sales—underscoring elevated risk and limited global deterrence.