A fragmented ransomware ecosystem may be more threatening than we recognise

The ransomware ecosystem has fragmented. An area once dominated by big names like LockBit and Conti is now filled with countless smaller, more agile threat actors. While this fragmentation could be seen as a win for defenders, it also poses a new threat: due to their ability to shift tactics, move operations, and quickly rebrand, these smaller groups are harder to target.

Because this trend of fragmentation shows no signs of stopping, cybercrime responses must adapt accordingly.