Q1 Ransomware Roundup

This report is a Q1 2021 ransomware trends roundup that documents sustained double-extortion activity, emergence of new ransomware variants (Babuk, Cuba, Phoenix, DearCry), increased professionalization of ransomware operations (data leak sites, outsourced services, social-media extortion), use of DDoS as an additional extortion vector, and notable supply-chain/exploit activity (Microsoft Exchange exploitation and high-profile REvil demands). It also covers law-enforcement disruptions (NetWalker, Egregor) and provides an overview of evolving TTPs and their impact on organizational risk.