India experienced a significant 55% surge in ransomware incidents in 2024, recording 98 attacks, according to the “Ransomware Trends 2024: Insights for Global Cybersecurity Readiness” report by CyberPeace, a leading non-profit in cybersecurity. The months of May and October reported the highest activity.
The report leverages advanced OSINT (Open Source Intelligence) techniques, continuous monitoring of 166 threat actor groups, and data collection from 658 global servers and underground networks. Findings reveal that ransomware groups executed 5,233 claims across 153 countries, with the United States being the most targeted, followed by Canada, the UK, and Germany.
Killsec was identified as the most frequent threat actor, while Lockbit3 ranked second. Other groups, including Ransomhub, Darkvault, and Clop, showed moderate activity levels.
Major Vineet Kumar, CyberPeace’s global president, emphasized the need for collective action, stating, “Governments, organizations, and cybersecurity experts must collaborate to share intelligence, strengthen defenses, and develop proactive strategies to combat emerging threats and foster a secure digital ecosystem.”