DHS Stops 500+ Ransom Attacks, Recovers $4.3 Billion in Crypto

Ransomware Foiled: DHS Recovers $4.3 Billion in Stolen Crypto

The U.S. Department of Homeland Security’s (DHS) Cyber Crimes Center has achieved a remarkable feat, successfully disrupting over 500 cryptocurrency-based ransomware attacks since its formation in 2021. This proactive approach, led by Homeland Security Investigations (HSI), has resulted in the prevention of large-scale cyber extortion while recovering $4.3 billion in cryptocurrency that was illegally obtained through ransomware scams.

Ransomware Attacks on the Rise

Ransomware attacks, where cybercriminals encrypt victims' data and demand payment in exchange for the decryption key, have surged over recent years. According to DHS, United States government agencies were among the top targets, representing 21% of the disrupted attacks. This alarming statistic underscores the persistent threat ransomware poses to critical infrastructure.

Mike Prado, the deputy assistant director of HSI’s Cyber Crimes Center, explained that attackers frequently target vulnerabilities in software, often exploiting security gaps before organizations even realize they are at risk. The agency’s cyber teams constantly monitor internet traffic and analyze software weaknesses to prevent attacks before they materialize.

Seizing Billions in Illicit Funds

In addition to disrupting attacks, the Cyber Crimes Center has seized billions of dollars in cryptocurrency from hackers. These funds were either stolen or paid as ransom by victims desperate to recover their encrypted data. The center's proactive stance has led to the recovery of $4.3 billion worth of extorted crypto from various exchanges and hackers' devices.

Despite these significant wins, Prado acknowledged the challenges in building cases against criminals, especially when attacks are thwarted before they can unfold. Nevertheless, the ability to stop ransomware attacks and notify victims beforehand has been crucial in minimizing the financial and operational damage these incidents typically cause.

Ransomware Trends and Future Challenges

A recent mid-year report by Chainalysis found that cryptocurrency ransomware inflows had surged by 2% in 2024, reaching $459.8 million, with maximum payments increasing by 96% year over year. The median ransom payment jumped from under $200,000 in early 2023 to $1.5 million by mid-2024. This trend indicates that ransomware criminals are growing more brazen, demanding larger sums and targeting high-value entities.

Despite these rising threats, the DHS and HSI are determined to stay ahead, working with international partners and continuously improving their defenses to protect organizations from future cyber extortion attacks.

Also read: when did laborx introduce its full-time jobs module Tapswap