Ransomware In Q3 2022

Q3 2022 ransomware assessment: overall activity declined modestly but LockBit increased market share (peaking >40% in September); multiple new data-leak sites and groups emerged to fill the Conti gap; attacks targeted critical infrastructure and Western countries, with several incidents showing political motivations (e.g., Montenegro, Albania). The leaked LockBit 3.0 builder and ongoing geopolitical drivers are expected to increase ransomware activity in Q4 2022.