88% of all ransomware is detected in the healthcare industry

Solutionary found that companies in the healthcare industry had the most ransomware present, accounting for 88 percent of all ransomware detections in Q2. In addition, Cryptowall was the top ransomware variant detected during the quarter, accounting for nearly 94 percent of detections.

“Healthcare has been a target for ransomware campaigns because the industry has often paid ransom to retrieve vital customer data quickly. Furthermore, healthcare organizations use an abundance of systems and devices that are crucial pivot-points for an attacker, and they can even be victims of ransomware themselves,” said Rob Kraus, director of research, Security Engineering Research Team, Solutionary.

“The most important steps in protecting your company’s and your customers’ data from the growing malicious ransomware onslaught are ensuring that you have a robust backup and recovery process, and that your security software is up-to-date and able to detect the most recent ransomware variants. As the threat continues to evolve, it will be crucial for organizations to have defined incident-response procedures and proper detective and preventive controls in place to reduce ransomware’s impact,” Kraus added.

Key findings

• The industry most often targeted by ransomware attacks, healthcare, led with 88 percent of Solutionary detections. Affected industries also included education (6 percent) and finance (4 percent), with eight other industries combining for less than 2 percent of detections.
• Researchers identified the top attack types of Q2 ‘16. Out of 11 categories, the top three – web application, malware and application-specific attacks – accounted for roughly 62 percent of all attacks. Threat actors focused primarily on web applications, which were the target of nearly 24 percent of all attacks.
• Attacks focusing on ActiveX or Adobe products accounted for nearly 48 percent of all attacks against the top five industries (retail, healthcare, education, finance and technology).
• The retail sector was the focus of 18 percent of all attacks during Q2 ’16.
• Germany was the number-one source of all non-U.S. based attacks, responsible for nearly 15 percent of attacks overall.