Extortion attacks on the rise as hackers prioritize supply-chain weaknesses

https://www.cybersecuritydive.com/news/ransomware-extortion-intel-471/811954/

Publish Date: 2026-02-11 11:27:00

Source Domain: www.cybersecuritydive.com

Listen to the article
4 min

This audio is auto-generated. Please let us know if you have feedback.

Dive Brief:

Ransomware actors extorted consumer and industrial products vendors, consulting firms and manufacturing companies more than any other organizations in 2025, the security firm Intel 471 said in a report published on Tuesday.
The U.S. was, by far, the most affected country, accounting for more than half of all extortion victims.
Cyber threat actors exploited more than 40% of the 520 vulnerabilities disclosed in 2025, according to Intel 471, which predicted that AI would further reduce the time needed to exploit these vulnerabilities in 2026.

Dive Insight:

The number of extortion-related cyberattacks increased by roughly 63% in 2025 to 6,800, according to Intel 471’s report, which is based on data from the company’s analysis of dark-web forums. The previous year saw the “rapid ascension” of the Qilin ransomware gang, Intel 471 said, although the Sp1d3r Hunters alliance (composed of Scattered Spider, LAPSUS$ and ShinyHunters hackers) and the Cl0p gang grabbed most of the headlines with high-profile operations.

Businesses should be particularly alert for supply-chain attacks leveraging vulnerabilities in their contractors’ products, the report warned. By compromising a managed service provider or software vendor to access its customers’ systems, a supply-chain attack “leverages established trust, allowing attackers to bypass robust defenses and achieve a much greater impact with significantly less effort,” Intel 471 researchers wrote.

Cleo and Salesloft experienced major breaches that led to significant downstream intrusions in 2025, with researchers attributing the former campaign to Cl0p and noting the potential involvement of Sp1d3r Hunters in the latter…

Source