Ransomware is a type of malware, software that can infiltrate computer systems, networks, or servers and modify the data within.
What makes ransomware unique is its ability to encrypt or transform data into secret code, making it inaccessible to the owner.
Ransomware attackers often demand a "ransom" from victims to restore their "held hostage" data.
According to cybersecurity firm Kaspersky, ransomware is currently the most popular cybercrime due to its clear and easily implemented monetization model.
Cybersecurity firm Coveware estimates that in the first quarter of 2023, the average ransom paid by ransomware victims to perpetrators reached USD 327,800, or approximately Rp 4.8 billion (assuming an exchange rate of Rp 14,811 per USD).
This amount is lower than the fourth quarter of 2022, which averaged USD 408,600, or approximately Rp 6.1 billion.
However, the trend is increasing year-on-year. Compared to the first quarter of 2022, the average ransomware ransom in the first quarter of 2023 increased by 55% (year-on-year/YoY).
According to Coveware, the increasing trend in ransomware cases and ransoms is due to many factors, including the Russia-Ukraine war and global economic turmoil.
"Western sanctions against Russia have led to many scientifically educated people becoming unemployed. As a result, some may turn to cybercrime to make a living," said the Coveware team in a report on its official website (April 28, 2023).
"In addition, rising inflation and widespread layoffs in the global technology industry have created financial pressure on technology professionals. This has forced some unemployed professionals to participate in cybercrime," they said.
In early May 2023, the LockBit hacking group claimed to have launched a ransomware attack on Bank Syariah Indonesia (BSI) and stolen its data. However, BSI apparently did not pay the demanded ransom, so LockBit leaked BSI's data to the dark web.
"@darktracer_int's Twitter account stated on Tuesday, May 16, 2023, 'The negotiation period has ended, and the LockBit ransomware group has finally published all the data they stole from Bank Syariah Indonesia on the dark web.'"