嗯，用户让我总结一篇文章，控制在100字以内，而且不需要特定的开头。首先，我需要快速浏览文章内容，抓住主要信息。 文章标题提到FinCEN数据显示了45亿美元的勒索软件支付，2023年创纪录。接着，文中详细说明了2023年的数据是11亿美元，涉及1512次事件。FinCEN分析了从2022年到2025年的数据，总共报告了4194次事件和超过21亿美元的支付。对比之前的数据，勒索软件在2023年达到峰值。 然后，文章提到了支付金额的中位数变化，以及受影响最大的行业：金融、制造和医疗。还列出了主要的勒索软件变种和攻击者使用的通信渠道及支付方式。 用户的需求是简洁的总结，所以我要提炼出关键数字和趋势。比如总支付额、年度峰值、涉及事件数、主要行业和变种等。 最后，确保语言简洁明了，控制在100字以内。可能需要合并一些信息点，避免冗余。 </think> FinCEN数据显示2023年勒索软件支付创纪录达11亿美元，涉及1512次事件；截至2024年总支付超45亿美元。金融、制造和医疗行业损失最重。主要勒索软件包括ALPHV/BlackCat、Akira等。 2025-12-9 00:26:49 Author: securityaffairs.com(查看原文) 阅读量:36 收藏
FinCEN data shows $4.5B in ransomware payments, record spike in 2023
Pierluigi Paganini
December 09, 2025
Ransomware payments reported to FinCEN exceeded $4.5B by 2024, with 2023 marking a record year at $1.1B across 1,512 incidents.
FinCEN analyzed ransomware trends using Bank Secrecy Act (BSA) reports filed from January 2022 to February 2025. During this period, organizations reported 4,194 ransomware incidents and more than $2.1 billion in payments. For comparison, from 2013 to 2021, FinCEN logged 3,075 reports totaling about $2.4 billion. Ransomware peaked in 2023 with 1,512 incidents and $1.1 billion paid, up 77% from 2022. In 2024, incidents dipped to 1,476 and payments dropped to about $734 million.
Median ransomware payments shifted over the period: $124,097 in 2022, $175,000 in 2023, and $155,257 in 2024, with most payments under $250,000. Financial services, manufacturing, and healthcare faced the most incidents and highest total losses.
FinCEN identified 267 ransomware variants, with ALPHV/BlackCat, Akira, LockBit, Phobos, and Black Basta leading.
“Akira had the highest number of incidents (376) and ALPHV/BlackCat had the highest total
dollar value of transactions (approximately $395.3 million) during the review period, according to
FinCEN’s analysis of reported ransomware-related transactions.” reads the report.
According to the report, TOR was the top communication channel (67%), followed by email (28%). Nearly all payments (97%) are made in Bitcoin. Threat actors laundered funds mainly through unhosted crypto wallets and CVC exchanges.
“ransomware is a complex cybersecurity problem requiring a variety of preventive, protective, and preparatory best practices. CISA’s StopRansomware.gov offers a one-stop-shop for government resources containing alerts, guides, fact sheets, and training all focused on reducing the risk of ransomware.” concludes the report.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, ransomware)
如有侵权请联系:admin#unsafe.sh