Threat Spotlight: Data Extortion Ransomware Threats

This Flare Threat Spotlight summarizes the rising ransomware data-extortion landscape, driven by RaaS models and affiliate economies; it highlights major actors (LockBit, Clop, AlphV/BlackCat), a marked increase in double/triple extortion, targeting shifts toward Western Europe and the U.S., and worrying changes in criminal norms (e.g., BlackCat encouraging critical-infrastructure targeting). The report uses the AN-Security leak drama to illustrate dark-web dispute dynamics and promotes Flare's Threat Exposure Management offering for monitoring supply-chain ransomware exposure.