April 2025 Threat Trend Report on Ransomware

May 21, 2025, 8:23 p.m.

Description

This analysis presents ransomware statistics for April 2025, including new samples collected, affected systems, and targeted companies. The report shows a relative increase in new ransomware samples compared to March. It provides a six-month overview of collected samples and details on companies affected by various ransomware groups, based on information from dedicated leak sites. The data is collected through the ATIP infrastructure and includes MD5 hashes of some samples. The report aims to give a comprehensive view of the current ransomware landscape, both within Korea and internationally, offering valuable insights into the evolving threats posed by different ransomware groups.

Date

  • Created: May 14, 2025, 6:57 p.m.
  • Published: May 14, 2025, 6:57 p.m.
  • Modified: May 21, 2025, 8:23 p.m.

Indicators

  • e4383b3d43c95386342786ccba0f0a52f185b7e008b4f9e0a32263e94d37176f
  • b31fbb61443ebb34d25eb109074e17e5be3f50d9fd265566dee37851ce6be512
  • b2f5b352f2fd517237b0f95bc96d5033f8bad3f8f6d8ac2aea24fa053cccf0cd
  • b19f7ad2902b65424313b1c06ac981e3b89062f201e6ad9f5f6f1d85a49090ce
  • a263c29f773df8a0abbee3d595a081556530aa09bd8c55c8bffd257eaafd2f54

Attack Patterns

  • Sarcoma
  • Nightspire

Additional Informations

  • Korea, Democratic People's Republic of
  • Korea, Republic of