{"id":53420,"date":"2023-08-23T13:43:14","date_gmt":"2023-08-23T13:43:14","guid":{"rendered":"http:\/\/fb7411e6-7733-4e52-888a-b12f8ab19951"},"modified":"2023-08-23T13:43:14","modified_gmt":"2023-08-23T13:43:14","slug":"ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/","title":{"rendered":"Ransomware attacks broke records in July, mainly driven by this one group"},"content":{"rendered":"<figure class=\"c-shortcodeImage u-clearfix c-shortcodeImage-large\">\n<div class=\"c-shortcodeImage_imageContainer\">\n<div class=\"c-shortcodeImage_image\"><picture class=\"c-cmsImage c-cmsImage_loaded\"><source media=\"(max-width: 767px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/6da930f86c19cb416cde24e53ff98f3d6ff0fdc9\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=768\" alt=\"Human hand holding the key with binary code as key wards.\"><source media=\"(max-width: 1023px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/a5774f2a6c0e43b53cef96558b185a79c4409776\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1024\" alt=\"Human hand holding the key with binary code as key wards.\"><source media=\"(max-width: 1440px)\" srcset=\"https:\/\/www.zdnet.com\/a\/img\/resize\/2fa55ef0e1c1358c8046244db19da778a4109d89\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280\" alt=\"Human hand holding the key with binary code as key wards.\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/a\/img\/resize\/2fa55ef0e1c1358c8046244db19da778a4109d89\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280\" alt=\"Human hand holding the key with binary code as key wards.\" width=\"1280\" height=\"800.1461187214612\" fetchpriority=\"low\"><\/picture><\/div>\n<p> <!----><\/div>\n<p> <!----><figcaption> <span class=\"c-shortcodeImage_credit g-outer-spacing-top-xsmall u-block\">Boris Zhitkov\/Getty Images<\/span><\/figcaption><\/figure>\n<p><a href=\"https:\/\/www.zdnet.com\/topic\/ransomware\/\" rel=\"follow\">Ransomware<\/a> attacks reached record levels in July 2023, driven by the Cl0p ransomware group&#8217;s exploitation of MOVEit software.&nbsp;<\/p>\n<p>In a <a href=\"https:\/\/www.nccgroup.com\/us\/resource-hub\/cyber-threat-intelligence-reports\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" class=\"c-regularLink\">new report<\/a> released by NCC Group&#8217;s Global Threat Intelligence team, analysts observed a record number of ransomware-related cyberattacks last month, with 502 major incidents tracked. According to the researchers, this represents a 154% increase year-on-year, compared to 198 attacks traced in July 2022.&nbsp;<\/p>\n<p><strong>Also:&nbsp;<\/strong><a href=\"https:\/\/www.zdnet.com\/article\/ransomware-an-executive-guide-to-one-of-the-biggest-menaces-on-the-web\/\" rel=\"follow\"><strong>What is ransomware? Everything you need to know<\/strong><\/a><\/p>\n<p>July&#8217;s numbers represent a 16% rise from the previous month, with 434 ransomware incidents recorded in June 2023.&nbsp;<\/p>\n<p>NCC Group says that this record number is due, in no small part, to the activities of Cl0P, a notorious group connected to the exploit of MOVEit software.<\/p>\n<h2>Who is Cl0p?<\/h2>\n<p>Cl0p, also known or associated with&nbsp;<a href=\"https:\/\/twitter.com\/MsftSecIntel\/status\/1665537730946670595\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" class=\"c-regularLink\">Lace Tempest<\/a>, was responsible for 171 of 502 attacks in July, many of which are believed to be down to the exploitation of file transfer software MOVEit.<\/p>\n<p><strong>Also:&nbsp;<\/strong><a href=\"https:\/\/www.zdnet.com\/article\/ransomware-has-now-become-a-problem-for-everyone-and-not-just-tech\/\" rel=\"follow\"><strong>Ransomware has now become a problem for everyone, and not just tech<\/strong><\/a><\/p>\n<p><a href=\"https:\/\/www.sentinelone.com\/anthology\/clop\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" class=\"c-regularLink\">Cl0p<\/a> has been around since 2019 and is known as a Ransomware-as-a-Service (RaaS) offering to cybercriminals. Also known as &#8212; or associated with &#8212; TA505, Cl0p has aggressively pursued high-value targets with the aim of extorting high ransomware payments, and operators will often steal information prior to encryption in what is known as a double-extortion tactic.<\/p>\n<p>If victims refuse to pay up, they risk having their stolen data published online and being named on a public leak site.<\/p>\n<h2>The MOVEit exploit&nbsp;<\/h2>\n<p>Branded as a &#8220;<a href=\"https:\/\/www.cybersecuritydive.com\/news\/moveit-breach-timeline\/687417\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" class=\"c-regularLink\">slow-moving disaster<\/a>,&#8221; the MOVEit exploit has impacted hundreds of organizations worldwide, with data belonging to millions of individuals stolen.&nbsp;<\/p>\n<p>In May, Progress Software <a href=\"https:\/\/www.progress.com\/security\/moveit-transfer-and-moveit-cloud-vulnerability\" target=\"_blank\" rel=\"noopener noreferrer nofollow\" class=\"c-regularLink\">reported<\/a> a zero-day vulnerability in the file transfer service, MOVEit Transfer and MOVEit Cloud, which could lead to escalated privileges and potential unauthorized access to customer environments. The problem is that MOVEit is utilized by government agencies and highly-regulated industries, both directly and via software supply chains.&nbsp;<\/p>\n<p><strong>Also: <a href=\"https:\/\/www.zdnet.com\/article\/this-ai-generated-crypto-invoice-scam-almost-got-me-and-im-a-security-pro\/\" rel=\"follow\">This AI-generated crypto invoice scam almost got me, and I&#8217;m a security pro<\/a><\/strong><\/p>\n<p>Alleged victims include the US Department of Energy, Shell, the BBC, Ofcom, the National Student Clearinghouse, and numerous US universities.&nbsp;<\/p>\n<h2>Impacted industries&nbsp;<\/h2>\n<p>In total, industrial players accounted for 31% of ransomware attacks or 155 recorded incidents.<\/p>\n<p>Industry players include professional and commercial services, manufacturing, construction, and engineering. According to the researchers, professional and commercial services were the most targeted in July, with ransomware gangs Cl0p, LockBit 3.0, and 8Base responsible for 48% of all cyberattacks recorded.&nbsp;<\/p>\n<p>While these sectors have suffered the highest number of ransomware attacks so far this year, consumer cyclicals have ranked second, with 79 attacks &#8212; or 16% of the whole in July. This category represents hotels and entertainment, media, retail, homebuilding, the automotive sector, and more.&nbsp;<\/p>\n<p><strong>Also: <a href=\"https:\/\/www.zdnet.com\/article\/best-vpn\/\" rel=\"follow\">The best VPN services right now: Expert tested and reviewed<\/a><\/strong><\/p>\n<p>When it comes to technology, ranking third with 72 cases &#8212; or 14% of monthly attacks &#8212; NCC Group says this industry &#8220;has experienced the highest increase in absolute numbers across the top three sectors this month [and] this is likely due to Cl0p&#8217;s activity.&#8221;<\/p>\n<p>Cl0p was responsible for 39 cyberattacks against the sector, or 54%, and this includes assaults against organizations offering IT and software services, semiconductor suppliers, consumer electronics, and telecommunications services.&nbsp;<\/p>\n<figure class=\"c-shortcodeImage u-clearfix c-shortcodeImage-large\">\n<div class=\"c-shortcodeImage_imageContainer\">\n<div class=\"c-shortcodeImage_image\"><picture class=\"c-cmsImage\"><!----> <img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/\" alt=\"NCC Group ransomware\" width=\"1280\" height=\"711.1111111111111\" fetchpriority=\"low\"><\/picture><\/div>\n<p> <!----><\/div>\n<p> <!----><figcaption> <span class=\"c-shortcodeImage_credit g-outer-spacing-top-xsmall u-block\">NCC Group<\/span><\/figcaption><\/figure>\n<h2>New ransomware groups appear on the scene&nbsp;<\/h2>\n<p>Following Cl0p, Lockbit 3.0 was ranked as the second-most active ransomware gang in July, being responsible for 50 attacks, or 10%. While this represents a decline of 17% month-on-month, July was also a staging ground for new and rebranded threat actors to make their presence known. &nbsp;<\/p>\n<p>For example, Noescape &#8212; believed to be a rebrand of <a href=\"https:\/\/www.zdnet.com\/article\/avaddon-ransomware-group-closes-shop-sends-all-2934-decryption-keys-to-bleepingcomputer\/\" rel=\"follow\">Avaddon<\/a>, which closed after sending thousands of decryption keys to a media outlet in 2021 &#8212; accounted for 16 of the recorded attacks, joining others including 8Base, BianLian, BlackCat, Play, and Cactus.<\/p>\n<p><strong>Also: <a href=\"https:\/\/www.zdnet.com\/article\/industrial-networks-need-better-security-as-attacks-gain-scale\/\" rel=\"follow\">Industrial networks need better security as attacks gain scale<\/a><\/strong><\/p>\n<p>&#8220;Many organizations are still contending with the impact of Cl0p&#8217;s MOVEit attack, which goes to show just how far-reaching and long-lasting ransomware attacks can be &#8212; no organization or individual is safe,&#8221; Matt Hull, Global Head of Threat Intelligence at NCC Group, commented. &#8220;This campaign is particularly significant given that Cl0p has been able to extort hundreds of organizations by compromising one environment. Not only do you need to be vigilant in protecting your own environment, but you must also pay close attention to the security protocols of the organizations you work with as part of your supply chain.&#8221;<\/p>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>New NCC Group data finds July ransomware incident rates have broken previous records, with Cl0p playing no small part.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-53420","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Ransomware attacks broke records in July, mainly driven by this one group 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Ransomware attacks broke records in July, mainly driven by this one group 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-23T13:43:14+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/a\/img\/resize\/2fa55ef0e1c1358c8046244db19da778a4109d89\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Ransomware attacks broke records in July, mainly driven by this one group\",\"datePublished\":\"2023-08-23T13:43:14+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/\"},\"wordCount\":773,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/2fa55ef0e1c1358c8046244db19da778a4109d89\\\/2023\\\/08\\\/23\\\/108a8d5a-e921-4552-8614-96d59344bb7f\\\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/\",\"name\":\"Ransomware attacks broke records in July, mainly driven by this one group 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/2fa55ef0e1c1358c8046244db19da778a4109d89\\\/2023\\\/08\\\/23\\\/108a8d5a-e921-4552-8614-96d59344bb7f\\\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280\",\"datePublished\":\"2023-08-23T13:43:14+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/2fa55ef0e1c1358c8046244db19da778a4109d89\\\/2023\\\/08\\\/23\\\/108a8d5a-e921-4552-8614-96d59344bb7f\\\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/a\\\/img\\\/resize\\\/2fa55ef0e1c1358c8046244db19da778a4109d89\\\/2023\\\/08\\\/23\\\/108a8d5a-e921-4552-8614-96d59344bb7f\\\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Ransomware attacks broke records in July, mainly driven by this one group\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Ransomware attacks broke records in July, mainly driven by this one group 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/","og_locale":"en_US","og_type":"article","og_title":"Ransomware attacks broke records in July, mainly driven by this one group 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2023-08-23T13:43:14+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/a\/img\/resize\/2fa55ef0e1c1358c8046244db19da778a4109d89\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Ransomware attacks broke records in July, mainly driven by this one group","datePublished":"2023-08-23T13:43:14+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/"},"wordCount":773,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/2fa55ef0e1c1358c8046244db19da778a4109d89\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/","url":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/","name":"Ransomware attacks broke records in July, mainly driven by this one group 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/2fa55ef0e1c1358c8046244db19da778a4109d89\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280","datePublished":"2023-08-23T13:43:14+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/#primaryimage","url":"https:\/\/www.zdnet.com\/a\/img\/resize\/2fa55ef0e1c1358c8046244db19da778a4109d89\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280","contentUrl":"https:\/\/www.zdnet.com\/a\/img\/resize\/2fa55ef0e1c1358c8046244db19da778a4109d89\/2023\/08\/23\/108a8d5a-e921-4552-8614-96d59344bb7f\/gettyimages-1426489732.jpg?auto=webp&amp;width=1280"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/ransomware-attacks-broke-records-in-july-mainly-driven-by-this-one-group\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Ransomware attacks broke records in July, mainly driven by this one group"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/53420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=53420"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/53420\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=53420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=53420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=53420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}