Ransomware attacks on large organizations continued in Q2. Ransomware programs Quarterly trends and highlights Attack on Colonial Pipeline and closure of DarkSide * Unique users who encountered this malware family as a percentage of all users attacked by financial malware. Note the disappearance of Emotet from the Top 10, which was predictable given the liquidation of its infrastructure in the previous quarter. The Top 3 is rounded out by SpyEye (8.8%), which added 5 p.p., climbing from the eighth place. Second place again went to the CliptoShuffler family (9.9%), whose share also fell, by 6 p.p. Last quarter, as per tradition, the most widespread family of bankers was ZeuS/Zbot (17.8%), but its share in Q2 almost halved, by 13 p.p. ** Unique users whose computers were targeted by financial malware as a percentage of all unique users of Kaspersky products in the country. * Excluded are countries with relatively few Kaspersky product users (under 10,000). Top 10 countries by share of attacked users Geography of financial malware attacks, Q2 2021 ( download)
