News and Analysis

Rapid7 Labs Q1 2025 ransomware data shows ransomware groups, including new ones, are continuing established revenue-making techniques such as data exfiltration and blackmail. Key sectors targeted include manufacturing, business services, healthcare, and construction, particularly in countries like the U.S., U.K., and Australia. The report revealed ransomware groups are reinvesting ransom pay-offs to purchase zero-days, and repurposing data from former groups or other sources. Extortionware, RaaS and double extortion remain prominent tactics employed by threat actors. Businesses can mitigate threats through better multi-factor authentication, continuous patch management, and ransomware attack simulations.