Coveware, which provides response services to ransomware attacks, has released a report for the fourth quarter of 2020.
The 4 most interesting data from the report
1. The average ransom payment stands at $ 154,108
It is a decrease of 34% from the third quarter.
2. Organisations decline to pay
The significant decrease in the average payment is due to the fact that more and more organizations are deciding not to pay the ransom.
3. 70% of ransomware attacks also include theft of information from the victim and double extortion
It is an increase of 43% from the third quarter.
4. Social Engineering is the main attack type
In the current quarter the main attack channel was social engineering attacks.
_________________
( Source: Coverware Ransomeware Report)
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
🕵️♂️ 5 Free Zero-Day Trackers Every CISO Needs Handy 🕵️♂️
Zero-days remain one of the biggest blind spots for security teams. Staying ahead means knowing where to track active vulnerabilities before they hit mainstream feeds. Here are 5 free resources every CISO should keep in their toolkit:
1️⃣ CISA Known Exploited Vulnerabilities (KEV) Catalog – Actively exploited vulnerabilities updated continuously.
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2️⃣ MITRE CVE Database – The definitive catalog of vulnerabilities, including emerging zero-days.
https://cve.mitre.org/
3️⃣ Google Project Zero – Research group uncovering and publishing zero-day findings.
https://googleprojectzero.blogspot.com/
4️⃣ ZDI (Zero Day Initiative) – Public advisories on discovered and responsibly disclosed zero-days.
https://www.zerodayinitiative.com/advisories/published/
5️⃣ Exploit Database (OffSec) – Community-driven database tracking zero-day exploits and proof-of-concepts.
https://www.exploit-db.com/
⚡ These trackers won’t stop attacks alone, but they give CISOs the visibility to patch fast, prioritize risks, and brief leadership with confidence.
At AUMINT.io, we go a step further – simulating how attackers exploit the human factor with phishing, vishing, and deepfake social engineering before a zero-day even gets weaponized.
🔗 Want to see how your employees would react under a zero-day-themed phishing test? Book a demo
#ZeroDay #CISO #CyberSecurity #VulnerabilityManagement #AUMINT