Sekoia Ransomware Threat Landscape (second-half 2022)

Sekoia's mid‑2022 ransomware landscape briefing highlights heightened professionalisation and expansion of ransomware activity—LockBit dominance and emergence of Royal/Conti‑derived families—alongside evolving TTPs such as callback phishing (BazaCall), intermittent encryption for faster compromise, and adoption of Rust for cross‑platform malware; it also documents growth of fraudulent call centres, RaaS affiliate shifts and sophisticated IAB syndicates, increasing the prevalence and impact of double/triple extortion and data‑leak driven extortion.