• About Us
  • Advertising
  • Digital Magazine
  • Supplements
  • Media Pack
  • Privacy Policy
  • Contact us
CXO Insight Middle East
  • News
  • Opinion
  • Business
    • Industries
      • Transport
      • Retail
      • Government
      • Real Estate
      • Education
      • Energy
      • Banking and Finance
    • Channel
  • Future
    • Tech
    • Gadgets
    • Science
    • Space
    • Sustainability
  • Events
    • Channel Insights Summit 2025
    • Insight Innovation Summit
    • CXO50 Oman
    • CXO50
    • ICT Awards
      • Dubai 2025
      • Saudi Arabia
    • Cyber Strategists Summit
    • Cloud Connect 2025
    • Channel Awards 2024
    • All events
  • GITEX
  • Digital Magazine
No Result
View All Result
CXO Insight Middle East
  • News
  • Opinion
  • Business
    • Industries
      • Transport
      • Retail
      • Government
      • Real Estate
      • Education
      • Energy
      • Banking and Finance
    • Channel
  • Future
    • Tech
    • Gadgets
    • Science
    • Space
    • Sustainability
  • Events
    • Channel Insights Summit 2025
    • Insight Innovation Summit
    • CXO50 Oman
    • CXO50
    • ICT Awards
      • Dubai 2025
      • Saudi Arabia
    • Cyber Strategists Summit
    • Cloud Connect 2025
    • Channel Awards 2024
    • All events
  • GITEX
  • Digital Magazine
No Result
View All Result
CXO Insight Middle East
No Result
View All Result

Ransomware payments dropped 35 per cent in 2024 as over half of victims refused to pay cybercriminals

by CXO Staff
February 6, 2025
in Future, News, Tech

After ransomware gangs extorted a record-breaking US$1.25 billion in 2023, and the value stolen in the first half of 2024 rose 2.38 per cent year-on-year, cybercriminals seemed poised for another record payday

Ransomware Gangs Intensify Attack Tactics

After ransomware gangs extorted a record-breaking US$1.25 billion in 2023, and the value stolen in the first half of 2024 rose 2.38 per cent year-on-year, cybercriminals seemed poised for another record payday. However, a sharp pullback in the latter half of 2024 radically changed the year’s outcome, instead resulting in overall ransomware payments seeing a sharp and encouraging 35 per cent decline.

Jackie Koven, Chainalysis Head of Cyber Threat Intelligence
Jackie Koven, Head of Cyber Threat Intelligence, Chainalysis

This is according to findings from the Chainalysis 2025 Crypto Crime report, which also noted that the US$813 million attackers extorted from their victims last year included a record-breaking outlier in the US$75 million paid by an undisclosed victim to the Dark Angels group. “For years now, the cybersecurity landscape seemed to be hurtling towards a so-called ransomware apocalypse, so this sharp decline, to levels even lower than those in 2020 and 2021, speaks to the effectiveness of law enforcement actions, improved international collaboration, and a growing refusal by victims to cave into attacker’s demands,” said Jacqueline Burns Koven, Head of Cyber Threat Intelligence at Chainalysis.

Another positive trend is the widening gap between the amounts demanded by bad actors and the actual payouts made by victims — in H2 2024, there was a 53 per cent difference between the two. Moreover, despite the number of ransomware events actually increasing in the second half of 2024, the number of on-chain payments declined, suggesting that while more victims were targeted, fewer paid. In cases where victims did pay attackers, on average, the final amounts for these ransoms typically ranged between US$150,000 to US$250,000, regardless of attackers’ initial demands.

For attackers who received payments, Centralized Exchanges (CEXs) were a preferred means of converting their crypto gains into fiat currencies. Consequently, actions such as the sanctioning of Russia-based exchange, Cryptex, and the German Federal Criminal Police (BKA)’s seizure of 47 Russian language no-KYC crypto exchanges — both in September 2024 — have impacted the ability of ransomware actors to launder their illicit earnings. Chainalysis data shows that substantial volumes of crypto funds extorted by ransomware groups last year continue to be held in personal wallets.

“Ransomware operators, a primarily financially motivated group, are abstaining from cashing out more than ever. This potentially indicates a fear of being traced, identified, and prosecuted by law enforcement agencies, made possible with the help of crypto investigation tools such as those provided by Chainalysis,” added Koven.

While these developments bode well for businesses that have long battled the threat of ransomware, Chainalysis warned against complacency. “Today, 7-8 figure ransoms have become the outliers, as the ransomware actor landscape is dominated by groups extorting low- and mid-value payments,” Koven explained. “With smaller businesses also in the crosshairs, protecting these organisations is critical to economic resilience as in the UAE for example, the country’s over half a million SMEs contribute as much as 63 per cent of the nation’s non-Oil GDP. It will take sustained collaboration and innovative defences to build on the progress made in 2024 and ensure organisations across all segments stay protected against the threat of ransomware.”

Tags: cyberattacksCybercriminalspaymentsransomeware
ShareTweet

Related Posts

Redington and GitLab partner to drive DevSecOps in MEA via AWS Marketplace
Business

Redington and GitLab partner to drive DevSecOps in MEA via AWS Marketplace

Redington announced it signed a Master Partner Agreement with GitLab, the most comprehensive, intelligent DevSecOps platform. As part of the...

June 26, 2025
Oracle Red Bull Racing selects Oracle Fusion Cloud Applications Suite to accelerate operations
Future

Oracle Red Bull Racing selects Oracle Fusion Cloud Applications Suite to accelerate operations

Oracle Red Bull Racing is adopting Oracle Fusion Cloud Applications Suite to better support its multiple-championship-winning team. With Oracle Fusion...

June 26, 2025

Discussion about this post

Latest Issue

Redington and GitLab partner to drive DevSecOps in MEA via AWS Marketplace

Redington and GitLab partner to drive DevSecOps in MEA via AWS Marketplace

June 26, 2025
Oracle Red Bull Racing selects Oracle Fusion Cloud Applications Suite to accelerate operations

Oracle Red Bull Racing selects Oracle Fusion Cloud Applications Suite to accelerate operations

June 26, 2025
Channel Insights Summit 2025: Shaping the future of the channel

Channel Insights Summit 2025: Shaping the future of the channel

June 26, 2025

The most trusted source of strategic intelligence for IT decision makers in the Middle East.

About

  • About Us
  • Advertising
  • Digital Magazine
  • Supplements
  • Media Pack
  • Contact Us

Policies

  • Privacy Policy

© 2024 – CXO Insight Middle East. All Rights Reserved.

Facebook-f X-twitter Linkedin
Separated they live in Bookmarksgrove right at the coast of the Semantics, a large language ocean. A small river named Duden.

About

  • About Us
  • Site Map
  • Contact Us
  • Career

Policies

  • Help Center
  • Privacy Policy
  • Cookie Setting
  • Term Of Use

Join Our Newsletter

© 2024 – CXO Insight Middle East. All Rights Reserved.

Facebook-f Twitter Youtube Instagram

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In
Join our mailing list
Sign up here to get the latest news, updates and special offers delivered directly to your inbox.
No Result
View All Result
  • News
  • Opinions
  • Business
    • Industries
      • Transport
      • Retail
      • Government
      • Real Estate
      • Education
      • Energy
      • Banking and Finance
  • Channel
  • Future
    • Tech
    • Gadgets
    • Science
    • Space
    • Sustainability
  • Events
    • Channel Insights Summit 2025
    • Insight Innovation Summit
    • CX50 Oman
    • CXO50
    • ICT Awards
      • Dubai
      • Saudi Arabia
    • Cyber Strategists Summit
    • Cloud Connect 2025
    • Channel Awards 2023
    • All events
  • Videos
  • GITEX GLOBAL
  • Digital Magazine

© 2024 - CXO Insight Middle East. All Rights Reserved.