Last Week in Ransomware: 09.09.2024

This briefing covers recent ransomware activity: RansomHub reportedly exfiltrated 93 GB of data from Planned Parenthood of Montana and threatened publication unless paid; a new Cicada3301 Linux ransomware variant (written in Rust, using ChaCha20) appears to reuse techniques from BlackCat/ALPHV and may be connected to the Brutus VPN-brute-forcing botnet; and industry survey data shows high rates of repeat ransomware attacks and costly, often unsuccessful ransom payments, underscoring organized extortion and data-leak driven monetization.