TABLE OF CONTENTS 1 EXECUTIVE SUMMARY 3 1.1 Methodology 5 1.2 Data Collection 5 1.3 Analysis and Classification 5 2 NEW RANSOMWARE TRENDS 6 2.1 Double Trouble: Ransomware and Data Exfiltration 6 2.2 Overlapping Victims 6 3 MOST TARGETED COUNTRIES 11 3.1 Targeted Ransomware Attacks 13 3.2 Origin of Ransomware Groups 13 3.3 Motives of Ransomware Groups 15 4 REGIONAL SPOTLIGHT 16 4.1 North America 16 4.2 Latin America (LATAM) 17 4.3 Africa 18 4.4 Europe 19 4.5 Asia Pacific (APAC) 20 4.6 Middle East and North Africa (MENA) 21 5 MOST TARGETED INDUSTRIES 22 5.1 State-Sponsored Ransomware Attacks 24 6 TOP EXPLOITED VULNERABILITIES 25 7 DOPPELPAYMER: A CASE STUDY 27 7.1 DoppelPaymer: Attacks Timeline 28 7.2 DoppelPaymer: Most Targeted Industries and Countries 30 8 WHAT IS NEXT? 32 9 APPENDIX A – CLASSIFICATION PROCESS 34 2 | The Ransomware Landscape