Ransomware Threat Report Q2-2021

This Q2-2021 ransomware threat report details 625 ransomware victims across 62 countries, identifies Conti as the most active group (139 victims), and reviews major incidents such as the Colonial Pipeline (DarkSide), JBS (REvil), Brenntag, and Quanta; it analyzes top-targeted industries (manufacturing), common TTPs (phishing, command/scripting, application shimming, data encryption), MITRE ATT&CK mappings for Conti/REvil/Avaddon, leak sites/double-extortion trends, law enforcement impacts (Avaddon decryption key release), and provides mitigation recommendations including backups, MFA, patching, AV, and IOC usage.