ESTsecurity, in the first quarter, blocked a total of about 177,000 Ransomware behavior-based cases, an increase of approximately 14,000 cases from the previous quarter

Apr 13, 2022

Through ALYac's 'behavior-based pre-emptive ransomware blocking', 177,732 attacks blocked in Q1, an average of 1,974 a day

▲ ALYac's behavior-based ransomware blocking statistics for Q1, released by ESTsecurity (Provided by ESTsecurity)

ESTsecurity (CEO Jung Jin-il), a security specialist, announced on the 13th that it blocked a total of 177,732 ransomware attacks in the first quarter of 2022 through the 'behavior-based pre-emptive ransomware blocking' feature built into its ALYac antivirus program.

According to the statistics, ransomware attacks blocked by ALYac in the first quarter totaled ▲177,732, which on a daily basis works out at ▲around 1,974 ransomware attacks blocked per day on average.

These statistics count only attacks blocked through the 'behavior-based pre-emptive ransomware blocking feature' of the free ALYac antivirus program provided to individual users, so the total number of attacks is estimated to be far higher once pattern-based attacks are included.

ESTsecurity identified the key ransomware trends of the first quarter of 2022 as ▲the Russia-Ukraine war and ransomware, ▲the still highly active VenusLocker group, ▲Magniber ransomware distributed through typosquatting and ▲continued ransomware damage at global companies.

The most notable issue of the first quarter of 2022 was ransomware attacks related to Russia's invasion of Ukraine. The war between Russia and Ukraine has caused worldwide disruption socially, economically and in many other ways, and ransomware groups are exploiting the issue too. A prime example is HermeticRansom. That ransomware was not aimed at extorting money; it was confirmed to have served as a decoy for a wiper attack intended to delete data on Ukrainian systems. Alongside this, a Ukrainian security researcher leaked the source code of Conti ransomware, in what is presumed to have been retaliation for Conti posting a notice supporting the Russian government.

The VenusLocker group also remains highly active. Distributing ransomware in Korea continuously since 2017, the group has recently kept distributing ransomware in Korea using content on résumés, copyright violations and the like. It previously distributed Makop ransomware continuously, and signs of it distributing LockBit ransomware have recently been detected as well.

Signs of Magniber ransomware being distributed through typosquatting were also found again. Typosquatting is an attack technique that redirects users to a different page when they enter a domain address incorrectly or misspell it. Magniber ransomware is being distributed to Chrome and Edge browser users through typosquatting, and the page the attacker lures them to prompts them to download an MSI file. MSI is the extension used by Windows Installer, so a user who runs the file without suspicion is infected with the ransomware.

Ransomware damage at global companies also continues. Luxury clothing brand Moncler was attacked by BlackCat (or AlphV) ransomware in December 2021 and had data leaked, with the leaked data published on the Tor dark web network in January this year. Aviation services company Swissport International was also hit by ransomware, delaying some flights, and Nvidia too was attacked, with some systems confirmed to have been affected.

An ESTsecurity ESRC representative said: "Not only are ransomware attacks increasing continuously of late, their distribution methods are also evolving in line with the social environment," adding, "With more employees working from home to prevent the spread of COVID-19, companies must make it mandatory to check the OS and software security update status of remote work terminals that connect to the internal network, and run employee security awareness training alongside it."

ESTsecurity, meanwhile, is working closely with the Korea Internet & Security Agency (KISA) on ransomware information gathering and coordinated response, in order to prevent harm to Korean users from ransomware infection.

Other ransomware newly discovered or worth noting in the first quarter of 2022, as identified by ESRC, is as follows.

[이스트소프트] K몬스터그룹과 ‘페르소에이아이(Perso AI)’ 글로벌 사업 확대 MOU 체결

26. 9. 11.

ESTsoft to Launch AI Assistant 'Al-Secretary' in H2... The Most User-Friendly Installable Agent

26. 8. 31.

ESTsoft Launches 'Markdot', an Essential AI-Era Utility... Read, Write, and Share AI-Friendly Markdown!

26. 8. 25.

[ESTsoft] AI for Everyone Challenge with 'Al-Secretary'... Uniting Domain Expertise in Strategic Consortium!

26. 8. 20.

ESTsoft Record-High H1 Revenue of 60.7 Billion KRW… Operating Loss Decreases by 53.3%

26. 8. 14.

Back to list

Global SaaS with AI
A scalable Human SaaS service that can be accessed from anywhere in the world using AI technology
Senior care with AI
Interactive AI human supports guidance, consultation, and interaction both offline and online. Expanding as a service hub without language barriers in retail, tourism, entertainment, exhibitions, manufacturing, and public sectors.
Alan Agentic with AI
Artificial intelligence multi-agent that goes beyond AI search and reaches solutions for problem solving
Education with AI
Celebrity instructor video lecture creation, TOEIC speaking education content production, as a fitness training instructor
Expansion of educational businesses in various fields such as AI content
Content with AI
Implementing 'moving pictures' with EST AI technology, 'face transformation, makeup application, and clothing creation' through deep learning
Creating and utilizing various AI human content such as new employee analysts, announcers, etc.
API business with AI
Companies can focus on their inherent customer value by providing data and solutions using AI
as an API.
Software with AI
Background removal technology applied in ALSee Capture, like the smooth design of ESTsoft AI technology and ALTools products,
provides the utility environment that users want.

Senior care with AI
A scalable Human SaaS service that can be accessed from anywhere in the world using AI technology
Senior care with AI
Interactive AI human supports guidance, consultation, and interaction both offline and online. Expanding as a service hub without language barriers in retail, tourism, entertainment, exhibitions, manufacturing, and public sectors.
Alan Agentic with AI
Artificial intelligence multi-agent that goes beyond AI search and reaches solutions for problem solving
Education with AI
Expansion of educational businesses in various fields, such as the establishment of celebrity lecture video courses, production of TOEIC speaking educational content, and AI content as a fitness training instructor
Content with AI
Implementing 'moving pictures' with EST AI technology, 'face transformation, makeup application, and clothing creation' through deep learning
Creating and utilizing various AI human content such as new employee analysts, announcers, etc.
API business with AI
We provide data and solutions utilizing AI through APIs to enable companies to focus on their intrinsic customer value.
Software with AI
Background removal technology applied in ALSee Capture, like the smooth design of ESTsoft AI technology and ALTools products,
provides the utility environment that users want.

Global SaaS with AI
A scalable Human SaaS service that can be accessed from anywhere in the world using AI technology
Senior care with AI
Interactive AI human supports guidance, consultation, and interaction both offline and online. Expanding as a service hub without language barriers in retail, tourism, entertainment, exhibitions, manufacturing, and public sectors.
Alan Agentic with AI
Artificial intelligence multi-agent that goes beyond AI search and reaches solutions for problem solving
Education with AI
Celebrity instructor video lecture creation, TOEIC speaking education content production, as a fitness training instructor
Expansion of educational businesses in various fields such as AI content
Content with AI
Implementing 'moving pictures' with EST AI technology, 'face transformation, makeup application, and clothing creation' through deep learning
Creating and utilizing various AI human content such as new employee analysts, announcers, etc.
API business with AI
We provide data and solutions utilizing AI through APIs to enable companies to focus on their inherent customer value.
Software with AI
Background removal technology applied in ALSee Capture, like the smooth design of ESTsoft AI technology and ALTools products,
provides the utility environment that users want.

Senior care with AI
A scalable Human SaaS service that can be accessed from anywhere in the world using AI technology
Senior care with AI
Interactive AI human supports guidance, consultation, and interaction both offline and online. Expanding as a service hub without language barriers in retail, tourism, entertainment, exhibitions, manufacturing, and public sectors.
Alan Agentic with AI
Artificial intelligence multi-agent that goes beyond AI search and reaches solutions for problem solving
Education with AI
Celebrity instructor video lecture creation, TOEIC speaking education content production, as a fitness training instructor
Expansion of educational businesses in various fields such as AI content
Content with AI
Implementing 'moving pictures' by applying EST AI technology, producing various AI human contents such as 'face transformation, makeup application, and clothing creation' for new employees including analysts and announcers, and utilizing them
API business with AI
Companies can focus on their inherent customer value by providing data and solutions using AI
as an API.
Software with AI
Background removal technology applied in ALSee Capture, like the smooth design of ESTsoft AI technology and ALTools products,
provides the utility environment that users want.