The most targeted sector by the DoppelPaymer ransomware gang is, to no surprise,
the manufacturing sector. This matches the o erallåfndings of our research, according
to which manufacturing is the most targeted sector in general, and across most
geographic areas.
However, the second most targeted sector by DoppelPaymer is the government and
defense sector ( hich came 6th in the åfndings in Chapter 5 abo e), accounting for
12% of the total ictims of the ransom are (16 ictims). Closel e amining the aâfected
organi ations in this sector re eals that most of them are from the Go ernment
Administration sub-industry, comprising mainly local governments entities. In addition,
most of them are from the US, followed by France and Canada.
Of note, these countries are also the most targeted countries by DoppelPaymer
ransom are hen taking into consideration the total 130 ictims from all sectors
targeted by the ransomware: the US is the most targeted country by DoppelPaymer
(accounting for a total of 70 ictims), follo ed b Canada (15 ictims) and France (14
victims). This is also very similar to the overall results of our analysis (see chapter 3
above), where the US is the most targeted country, Canada is second and France forth.
7.2 DOPPELPAYMER: MOST TARGETED INDUSTRIES AND COUNTRIES
DoppelPaymer: Most Targeted Industries
30%
12.31%
10.77%
10.77%
6.92%
4.62%
3.85%
3.85%
3.08%
3.08%
3.08%
2.31%
2.31%
2.31%
0.77%
Manufacturing
Government and Defense
Financial Services
Transportation
Education
Retail
Energy
Media
Hospitality-Leisure
Others
Technology
Healthcare
Legal and Human Resources
Pharmaceuticals and Chemicals
NPO
30 | The Ransomware Landscape