Record Activity Driven by Array of Options for Attackers

Key takeaways:

• Ransomware hits new highs: Over 2,200 victims were listed on leak sites in Q1, a 35% jump from last quarter. Cl0p and RansomHub dominate: These two groups led activity, with Cl0p responsible for the most known attacks.
• AI boosts phishing: Threat actors are using tools like GhostGPT to generate more convincing, hard-to-detect phishing emails.
• Extortion-only attacks rise: Some groups are skipping encryption altogether and focusing solely on data exposure threats.
• Social engineering evolves: New tactics include Microsoft Teams impersonation, deepfakes, and even physical mail scams.