TZUTC: -0500
MSGID: 1641.consprcy@1:2320/105 2d675bbc
PID: Synchronet 3.21a-Linux master/123f2d28a Jul 12 2025 GCC 12.2.0
TID: SBBSecho 3.28-Linux master/123f2d28a Jul 12 2025 GCC 12.2.0
BBSID: CAPCITY2
CHRS: ASCII 1
FORMAT: flowed
The end of ransomware? Report claims the number of firms paying up is
plummeting

Date:
Tue, 28 Oct 2025 17:26:00 +0000

Description:
Research shows poor performance in terms of payments across the board.

FULL STORY

The number of companies paying ransomware attackers for decryption keys and
delete stolen files has plummeted, and now represents just 23% of all 
victims, new research has claims. 

In its report, Coveware said ransom payment rates across all impact scenarios
- encryption, data exfiltration, and other extortion - fell to a historical
low of 23% in Q3 2025.  

This continuation of the long-term downward trend is something all industry
participants should take a moment to reflect on: that cyber extortions 
overall success rate is contracting," the company said.

Data-only attacks performing poorly, too

This is not the only metric thats significantly down. Average ransom payment
is now $376,941, representing a two-third decrease (66%) compared to Q2 2025.
Median ransom payment is now $140,000, which is also down 65% compared to the
second quarter of the year. 

Originally, the idea of ransomware was to simply encrypt the files and then
ask for money in exchange for the decryption key. However, when businesses
started setting up backups , hackers started stealing files and threatening 
to release them on the internet - a tactic now commonly known as double
extortion. 

In the meantime, building and maintaining ransomware variants became
expensive, forcing many ransomware actors to abandon the encryption part
altogether and focus exclusively on data exfiltration. ShinyHunters is a
shining example (pun very much intended). 

But Coveware says even this tactic isnt fruitful, as for data
exfiltration-only incidents, ransom payments fell to 19% in Q3 2025, which is
another record low. 

While this resolution rate tends to bounce around, Q3 was a very active
quarter for data exfiltration attacks, the researchers stressed. 

Cyber defenders, law enforcement, and legal specialists should view this as
validation of collective progress, Coveware says. The work that gets put in 
to prevent attacks, minimize the impact of attacks, and successfully navigate
a cyber extortion  each avoided payment constricts cyber attackers of oxygen. 

 Via BleepingComputer 

======================================================================
Link to news story:
https://www.techradar.com/pro/security/the-end-of-ransomware-report-claims-the
-number-of-firms-paying-up-is-plummeting

$$
--- SBBSecho 3.28-Linux
 * Origin: capitolcityonline.net * Telnet/SSH:2022/HTTP (1:2320/105)
SEEN-BY: 105/81 106/201 128/187 129/14 305 153/7715 154/110 218/700
SEEN-BY: 226/30 227/114 229/110 111 206 300 307 317 400 426 428 470
SEEN-BY: 229/664 700 705 266/512 291/111 320/219 322/757 342/200 396/45
SEEN-BY: 460/58 633/280 712/848 902/26 2320/0 105 304 3634/12 5075/35
PATH: 2320/105 229/426