The report presents statistics on new ransomware samples collected, the number of affected systems, and impacted companies for May 2025, noting a decline in new samples compared to April. It also highlights ransomware issues in Korea and abroad, based on data from AhnLab detections and ransomware leak sites monitored by ATIP. #AhnLab #ATIP #RansomwareLeakSites
Keypoints
- The number of new ransomware samples collected in May 2025 showed a decreasing trend compared to April 2025.
- Statistics are based on detection names assigned by AhnLab and data from ransomware group leak sites monitored by ATIP.
- The report covers ransomware issues affecting companies and systems in Korea as well as internationally.
- Details on specific ransomware groups and affected companies can be found in the ATIP report and attachments.
- Some ransomware groups’ data were collected late or are incomplete, impacting the comprehensiveness of the statistics.
- MD5 hashes of ransomware samples collected are listed for reference and further analysis.
MITRE Techniques
- [T1041] Exfiltration – Data exfiltration to ransomware leak sites monitored by ATIP. [‘The following are the statistics of affected companies posted by DLS of the ransomware groups collected by ATIP.’]
Indicators of Compromise
- [File Hashes] MD5 hashes of ransomware samples collected for reference – 03d02dac0e2be6a4d5d26ce6a2132fb3, 1846d5e033ab5fb00573300dc8abb992, and 4 more hashes.
Read more: https://asec.ahnlab.com/en/88474/