TahawulTech.com
  • TahawulTech.com
  • Region
    • UAE
      • UiPath simplifies agentic automation with voice agents with Google’s Gemini models
      • Digital twins, real impact: How virtual replicas are transforming industries 
      • EMURGO Labs and Pravica join forces to boost stablecoin interoperability
      • ExaGrid, VAD double down on decade-long alliance to redefine backup performance
      • Registration for ROSHN Hackathon 2025 begin, with prizes totaling SAR 1.3 million
    • Saudi Arabia
      • ASUS highlights innovation for Government and Education Sectors at Riyadh Showcase
      • Registration for ROSHN Hackathon 2025 begin, with prizes totaling SAR 1.3 million
      • HPE announces new cloud instance in the KSA for the HPE Juniper Networking Mist AI-native networking platform
      • The Arab Energy Fund delivers landmark issuance of $600 million on robust demand 
      • FIFAe and Lenovo set to power FIFAe finals with Legion Gaming Technology in Riyadh
    • Oman
      • Microsoft AI Tour showcases groundbreaking AI innovations for Oman
      • Open Innovation AI collaborates with Intel to revolutionize AI orchestration with Gaudi
      • KROHNE delivers insights to inspire the next generation of engineers in Oman
      • Oracle supports major project to accelerate Oman digital economy
      • Ooredoo accelerates cybersecurity in Oman with new deal
    • Bahrain
      • Bahrain sets global benchmark with GCC’s first stablecoin regulatory framework
      • Open Innovation AI collaborates with Intel to revolutionize AI orchestration with Gaudi
      • BDB launches “tijara” platform for SMEs
      • Bahrain achieves full nationwide 5G coverage
      • Batelco, SonicWall launch integrated security solutions for SMEs in Bahrain
    • Kuwait
      • Open Innovation AI collaborates with Intel to revolutionize AI orchestration with Gaudi
      • Infopercept opens its first Middle East office in Kuwait
      • Microsoft Compliance Manager now available in Kuwait
      • Commercial Bank of Kuwait gets mobile payments moving with Thales Digital Solutions
      • Ooredoo chooses Fortinet to deliver secure SD-WAN managed services in Kuwait
    • Africa
      • ODC Africa and ME partners with Hedera Africa Hackathon to boost Web3 innovation
      • Dubai’s Omining unveils first African site in Kenya’s Special Economic Zone
      • Rise of Fearless unites 2,500+ gamers through African heritage, battle royale
      • Rise of Fearless launches $700K investment round to advance Web3 mobile gaming in Africa 
      • e& enterprise and RAIN Technology to revolutionise Operating Room efficiency in hospitals across MEA
    • Middle East
      • Digital twins, real impact: How virtual replicas are transforming industries 
      • EMURGO Labs and Pravica join forces to boost stablecoin interoperability
      • Registration for ROSHN Hackathon 2025 begin, with prizes totaling SAR 1.3 million
      • FIFAe and Lenovo set to power FIFAe finals with Legion Gaming Technology in Riyadh
      • Appknox’s Privacy Shield to help enterprises in GCC boost mobile app data protection
    • Global
      • A potential breakthrough in US-China TikTok discussions
      • Japan records record smartphone growth in Q2 2025
      • South Korea wants to keep pace with U.S. and China tech initiatives
      • Apple unveils iPhone Air, iPhone 17 Series, Apple Watch 11, and AirPods Pro 3
      • FLAG drives global connectivity and growth with resilient digital infrastructure, says CEO
  • Industry
    • Education
      • Kaspersky launches online course for universities to integrate cybersecurity knowledge in curriculums
      • Back-to-school season: The importance of using responsible artificial intelligence
      • UAE schools embrace AI for a knowledge first economy, says ASUS commercial head
      • ASUS offers up to AED 1,000 off for Back-to-School 2025
      • Huawei MatePad 11.5 makes multitasking, creativity, and learning more accessible
    • Energy
      • Google invests in nuclear power for its data centres
      • Can U.S. power grids keep up with the data centre boom? 
      • Tesla applies for UK electricity supply license
      • Google invests heavily in hydroelectric energy
      • Amazon enters nuclear energy partnership to power data centres
    • Financial services
      • Future of Finance 2025 sets stage for transformative dialogue in Dubai
      • Rak Properties enables cryptocurrency payments via partnership with Hubpay
      • Zain powers Iraq’s digital future through customer-driven innovation, inclusion
      • American University of Sharjah, Ghaf Labs partner to boost student industry exposure 
      • American based insurance giant suffers cyber breach
    • Government
      • Cisco offers configuration options for EU data sovereignty
      • South Korea wants to keep pace with U.S. and China tech initiatives
      • Zuckerberg made White House visit prior to recent tariff threat
      • Rak Properties enables cryptocurrency payments via partnership with Hubpay
      • Emirati women mark 50 years of progress by powering the UAE’s digital-first future
    • Healthcare
      • AI stethoscopes could revolutionise heart health
      • Mecomed unveils digital health whitepaper to boost value-based healthcare in MEA 
      • myAster expands to Abu Dhabi, RAK, Ajman and Sharjah through 24×7 Express delivery
      • Aster Volunteers flag off mobile medical units for communities in Rwanda, Uganda
      • Apple’s latest watch improves blood oxygen monitoring
    • Property
      • Siemens supplies digital technology for factory-built housing
      • DLD boosts transparency with AI-enabled real estate advertising governance 
      • MBRHE and Beyond Limits AI MoU to enhance digital transformation
      • Huspy launches GCC’s first AI-powered mortgage chatbot to transform home financing  
      • DLD, VARA collaborate to boost leadership in realty and virtual assets regulation
    • Retail
      • myAster expands to Abu Dhabi, RAK, Ajman and Sharjah through 24×7 Express delivery
      • Huawei MatePad 11.5 makes multitasking, creativity, and learning more accessible
      • Belkin announces record-low prices on tech essentials for Amazon Prime Day 2025
      • Beyond Pixels: How next-gen LED displays are powering immersive brand experiences 
      • Global second-hand smartphone market sees annual drop
    • Technology
      • Logitech spotlights new AI-powered workplace innovations at GITEX Global 2025
      • UiPath simplifies agentic automation with voice agents with Google’s Gemini models
      • Qlik Predict brings No-Code Forecasting to real-world Enterprise AI
      • Zebra Technologies to demonstrate how Intelligent Operations improve workflows at GITEX 2025
      • Logitech is rewriting the book on complex meetings with Rally Board 65
    • Transport & Logistics
      • UK airport suffers cyber-attack disruption
      • Chinese flying cars crash at air show rehearsal
      • StarLink looking to collaborate with Saudi Arabia’s main airline
      • Tesla found partly liable for fatal 2019 Autopilot crash
      • Hefring Marine launches new app for comprehensive fleet management 
    • Travel & Hospitality
      • Sojern and PubMatic join forces to power next-gen travel advertising solutions
      • Cluster 2 signs agreement to advance smart airport operations in Saudi Arabia
      • 8th Int’l Conference on Education Quality kicks off in Dubai; highlights AI innovations
      • Arabian Travel Market to gather global AI experts to explore new frontiers in travel
      • Smartphones, social media drive travel decisions for Indians, says travel report
  • Company
    • Enterprise
      • Cloudera to showcase the future of enterprise AI and hybrid data at GITEX 2025
      • Catch up on all the excitement from the CISO50 and Future Security Awards 2025
      • CISO50 and Future Security Awards focus on excellence in innovation and leadership
      • HIMA appoints a new CEO for Sella Controls
      • RUCKUS Networks welcomes Graeme Kane as lead for Middle East and Africa Vertical Markets
    • Corporate
      • Qlik expands cloud footprint with new AWS region in Middle East
      • PeopleStrong powers UAE’s talent shift, accelerates ME growth: Mrigank Tripathi
      • Microsoft names Samer Abu-Ltaif president for Europe, ME and Africa
      • Open Innovation AI collaborates with Intel to revolutionize AI orchestration with Gaudi
      • YouGotaGift CEO says ‘product-centricity’ the key to their phenomenal success
    • SME
      • AI-powered solutions shape future of SMEs, says Zoftware founder 
      • Open Innovation AI collaborates with Intel to revolutionize AI orchestration with Gaudi
      • Kaspersky exposes new scam targeting SMBs
      • Thriwe: Enhancing the Omni-channel experience
      • Alaris expands information capture ecosystem for SMEs
    • Startup
      • AI without borders: Startups leading the next global leap 
      • Secure Domains brings cutting-edge DNS protection to MENA region 
      • Open Innovation AI collaborates with Intel to revolutionize AI orchestration with Gaudi
      • Kaspersky exposes new scam targeting SMBs
      • Thriwe: Enhancing the Omni-channel experience
    • Vendor
      • Logitech spotlights new AI-powered workplace innovations at GITEX Global 2025
      • HOT Systems to showcase hardware powered by PNY at GITEX 2025
      • Cloudera to showcase the future of enterprise AI and hybrid data at GITEX 2025
      • Qlik Predict brings No-Code Forecasting to real-world Enterprise AI
      • Kaspersky launches online course for universities to integrate cybersecurity knowledge in curriculums
    • Channel
      • HOT Systems to showcase hardware powered by PNY at GITEX 2025
      • Omnix expands Matterport powered Digital Twin Solutions in Saudi Arabia
      • Microsoft collaborates with Anthropic for Copilot improvements
      • Nvidia invests significant capital in OpenAI
      • Zahid Group and Infor to launch an Innovation Centre of Excellence
  • Trending
    • Digital Transformation
      • Internet of Things
      • Big Data
      • Blockchain
      • Smart City
      • Cloud Computing
    • Artificial Intelligence
      • Data Centre
      • Machine Learning
      • Virtual Reality
      • Robotics
      • Systems Integrator
      • E-commerce
    • 3D Printing
      • Self-driving Cars
      • Drones
      • Automation
      • Smartphones
      • Wearables
      • Virtualisation
    • Fintech
      • Storage
      • Mobile Payment
      • Startups
      • Applications
      • Security
  • News
    • All News
      • “I believe in creating a culture where individuals feel trusted, supported, and motivated to excel.” – Dr. Majeda Al Marzooqi, EDGE Group
      • At HPE, our vision is to make networking truly cloud-native and AI-driven.” – Jacob Chacko, HPE Aruba Networking
      • Logitech spotlights new AI-powered workplace innovations at GITEX Global 2025
      • HOT Systems to showcase hardware powered by PNY at GITEX 2025
      • Cloudera to showcase the future of enterprise AI and hybrid data at GITEX 2025
    • Software
      • Grok gets agentic coding upgrade
      • Trump Administration threatens a U.S. TikTok ban 
      • X accused of breaching advertising rules 
      • WeTransfer clarifies stance on training AI
      • U.S. Senate votes on state-level AI regulation 
    • Hardware
      • HOT Systems to showcase hardware powered by PNY at GITEX 2025
      • Apple weighs the value of AI-designed hardware
      • Netherlands talks with Nvidia and AMB over supply for AI-facility
      • ASUS Evo lineup: Enhancing the online experience
      • ASUS A3402-Next level computing performance
    • Networking
      • Who is in the running for the US TikTok takeover?
      • TikTok employees concerned about app’s mental health impact
      • T-Mobile’s U.S satellite service makes a nationwide debut
      • Nokia lowers 2025 profit outlook
      • X accused of breaching advertising rules 
    • Security
      • How to avoid putting kids at risk when posting photos: Sharing is not always caring
      • US agents uncover potential telecoms threat
      • UK airport suffers cyber-attack disruption
      • Kaspersky reports increased smartphone attacks in the first half of 2025
      • Kaspersky warns of a credential-stealing campaign on Facebook
    • Channel
      • HOT Systems to showcase hardware powered by PNY at GITEX 2025
      • Omnix expands Matterport powered Digital Twin Solutions in Saudi Arabia
      • Microsoft collaborates with Anthropic for Copilot improvements
      • Nvidia invests significant capital in OpenAI
      • Zahid Group and Infor to launch an Innovation Centre of Excellence
    • Telecoms
      • Japan records record smartphone growth in Q2 2025
      • AST SpaceMobile outlines 2026 satellite deployment plans 
      • EE introduces new child-safe smartphone plan
      • e&’s Monitoring-as-a-Service offers UAE businesses real-time infrastructure visibility
      • SK Telecom sees massive customer drop after data breach 
    • Video
      • Catch up on all the excitement from the CISO50 and Future Security Awards 2025
      • Watch experts address digital threats at the Infosec and Cybersecurity Congress Abu Dhabi 2025
      • Catch up on the highlights from our Channel Leadership Forum and Awards 2025
      • Catch up on the highlights from Bespin Global’s recent roundtable 
      • Relive all the thrills from the GovTech Innovation Forum and Awards 2025
  • Features
    • Features
      • Catch up on all the excitement from the CISO50 and Future Security Awards 2025
      • Making sovereignty intelligent in age of AI 
      • AI safety command centre: Your entire site—one dashboard away, says viAct official
      • Watch experts address digital threats at the Infosec and Cybersecurity Congress Abu Dhabi 2025
      • The Middle East leads the global race to build sovereign AI platforms
    • CIO Spotlight
      • DMCC
        Rare commodity: DMCC IT director Abdalla Al Ali
      • HSBC MENAT CIO Ghinwa Baradhi
        The bigger picture: HSBC MENAT CIO Ghinwa Baradhi
      • Mubadala Investment Company CIO Mansour Al Ketbi
        Mansour Al Ketbi unites IT teams for $125 billion Mubadala Investment Company
      • Tariq Al Usaimi, head of digital strategy for the Central Bank of Kuwait
        The new breed: National Bank of Kuwait CDO Tariq Al-Usaimi
      • Al Masah Capital CIO Ashith Piriyattiath
        Ashith Piriyattiath’s diverse & transformative GCC career
    • Case Studies
      • Survey reveals misalignment between cybersecurity and business goals in the UAE and KSA
      • 3,200+ fake Meta profiles used in Facebook scam attempt
      • Edenred UAE: Transforming Customer Service Over WhatsApp with Conversations and Answers
      • Customer Story: Nissan Saudi Arabia
      • elseco
        DIFC prioritises digital transformation to enhance connectivity and accessibility with Wi-Fi 6
    • Partner Watch
      • Juniper Networks Expands Partner Ecosystem Leveraging AI-Native Networking Solutions
      • Commvault selects AlJammaz Technologies as key distributor in the Kingdom of Saudi Arabia
      • Kaspersky signs MoU with Zayed University
      • F5 Appoints Al Jammaz as a Value-Added Distribution Partner
      • The time is now for RNS Managed Security Services
    • Vendor focus
      • Dell Technologies To Establish New Merge & Logistics Fulfilment Hub in Riyadh
      • Dell Technologies study reveals innovation leaders better equipped for economic challenges
      • A10 Networks partners on a mission to ‘accelerate’
      • “The world is on the verge of a new intelligent era powered by Industry 5.0” – David Shi, Huawei
      • Huawei signs new partnership in effort to accelerate SMBs digital transformation
    • Analysis
      • Emirati entrepreneurs learn, sell, and grow in a digital world, says new GoDaddy data 
      • Special Feature: Data Security in the Banking and Financial Sectors
      • Safeguarding Healthcare: Protecting Critical Data and Patient Privacy
      • Trend Micro Predictions Report Forecasts Cyber Fightback in 2022
      • Frost & Sullivan Names Tenable a Growth and Innovation Leader in the Global Vulnerability Management Market, 2021
    • Video
      • Catch up on all the excitement from the CISO50 and Future Security Awards 2025
      • Watch experts address digital threats at the Infosec and Cybersecurity Congress Abu Dhabi 2025
      • Catch up on the highlights from our Channel Leadership Forum and Awards 2025
      • Catch up on the highlights from Bespin Global’s recent roundtable 
      • Relive all the thrills from the GovTech Innovation Forum and Awards 2025
    • Lifestyle
      • German audio specialist Neumann expands KH monitor line with advanced subwoofers
      • Predator Helios Neo 16S AI showcases cutting-edge portable gaming power
      • Mecomed unveils digital health whitepaper to boost value-based healthcare in MEA 
      • myAster expands to Abu Dhabi, RAK, Ajman and Sharjah through 24×7 Express delivery
      • Huawei set to unveil new wearables, tablets, and phones in Paris on September 19 
    • Insight
      • Digital twins, real impact: How virtual replicas are transforming industries 
      • How to avoid putting kids at risk when posting photos: Sharing is not always caring
      • Making sovereignty intelligent in age of AI 
      • AI safety command centre: Your entire site—one dashboard away, says viAct official
      • Back-to-school season: The importance of using responsible artificial intelligence
    • Opinion
      • Digital twins, real impact: How virtual replicas are transforming industries 
      • Making sovereignty intelligent in age of AI 
      • AI safety command centre: Your entire site—one dashboard away, says viAct official
      • Back-to-school season: The importance of using responsible artificial intelligence
      • Opinion: The $2 billion AI gold rush, and why Elon Musk isn’t best pleased
    • Blogs
      • Opinion: TeKnowledge CTO on the Enterprise AI Execution Gap
      • Why I joined Cloudflare: To build world-class partnerships in EMEA
      • Revolutionising fan engagement in football through data, gamification, and smart stadium experiences
      • How enterprises can raise their cyber security readiness by going through 3 stages of preparation
      • Maestro Blocks: Transferring passion into businesses!
  • News
    • Region
      • Logitech spotlights new AI-powered workplace innovations at GITEX Global 2025
      • HOT Systems to showcase hardware powered by PNY at GITEX 2025
      • Cloudera to showcase the future of enterprise AI and hybrid data at GITEX 2025
      • UiPath simplifies agentic automation with voice agents with Google’s Gemini models
      • Qlik Predict brings No-Code Forecasting to real-world Enterprise AI
  • Magazines
    • CNME
      • September 2025
      • July 2025
      • May 2025
      • April 2025
      • March 2025
    • Reseller ME
      • September 2025
      • August 2025
      • July 2025
      • May 2025
      • April 2025
    • Security Advisor ME
      • September 2025
      • August 2025
      • June 2025
      • May 2025
      • April 2025
    • 60 Minutes
      • 60mins Day 5 – PM (2024)
      • 60mins Day 5 – AM (2024)
      • 60mins Day 4 – PM (2024)
      • 60mins Day 4 – AM (2024)
      • 60mins Day 3 – PM (2024)
    • Supplements
      • GISEC 2025 – Special Report
      • GovTech – October 2024
      • GITEX Tech Vision 2024
      • LinkShadow Special Report October 2024
      • GovTech – May 2023
  • Events & Conferences
    • Awards
      • CISO 50 & Future Security Awards 2025
      • The Future Enterprise Awards
      • KSA Future Enterprise Awards 2025
      • AI Conference & Awards 2025
      • The Channel Leaders Forum & Awards 2025
    • Customer Events
      • Planview Middle East Launch
      • Infosec & Cybersecurity Congress 2025 – Abu Dhabi
      • Infosec & Cybersecurity Congress 2024
      • Infosec & Cybersecurity Congress 2023
      • Race to innovate | Your Voice | Tahawul Tech
        Race to Innovate
    • Forums
      • Planview Middle East Launch
      • AI Conference & Awards 2025
      • The Channel Leaders Forum & Awards 2025
      • Infosec & Cybersecurity Congress 2025 – Abu Dhabi
      • The Future of Finance Conference
    • Your Voice
      • Race to innovate | Your Voice | Tahawul Tech
        Race to Innovate
      • Combating credit crunch
      • Rise of e-commerce
      • Expectations vs Investment
    • Webinars
      • Freshworks virtual webinar highlights increasing role of IT industry in accelerating digital transformation
      • Mimecast virtual webinar highlights importance of brand protection
      • Huawei and IDC collaborate on Autonomous Network white paper
      • WEBINAR: Experience the Intelligent HPE Hyperconverged and Composable Infrastructure
      • WEBINAR: How Alpha Data and Veritas Enable Enterprises to Win the War Against Ransomware
  • GITEX 2025
Don’t show this ad again.
D-Link
Bespin Global
Fortinet
Insight, News, Security

Group-IB unveils crime trends in ME: Ransomware, Carding, Initial Access Brokers

Daniel ShepherdDecember 8, 2021, 10:09 amDecember 8, 2021

Dubai, UAE, 07/12/2021: Group-IB, one of the global cybersecurity leaders, has presented its research into global cyberthreats in the report Hi-Tech Crime Trends 2021/2022 at its annual threat hunting and intelligence conference,CyberCrimeCon’21. In the report, which explores cybercrime developments in H2 2020–H1 2021, Group-IB researchers analyse the increasing complexity of the global threat landscape and highlight the ever-growing role of alliances between threat actors. The trend manifests itself in partnerships between ransomware operators and initial access brokers under the Ransomware-as-a-Service model. Scammers also band together in clans to automate and streamline fraudulent operations. Conversely, individual cybercrimes such as carding are in decline for the first time in a while.

For the 10th consecutive year, the Hi-Tech Crime Trends report analyses the various aspects of the cybercriminal industry’s operations, examines attacks, and provides forecasts for the threat landscape for various sectors. For the first time, the report was divided into five major volumes, all with a different focus: ransomware, the sale of access to corporate networks, cyberwarfare, threats to the financial sector, and phishing and scams. The forecasts and recommendations outlined in Hi-Tech Crime Trends 2020-2021 seek to prevent damage and downtime for companies worldwide.

Unwanted guests: over 1,000 accesses to corporate networks were offered for sale in the darknet  

One of the underlying trends on the cybercrime arena is a sharp increase in the number of offers to sale access to compromised corporate networks. The market of corporate initial access grew by almost 16% in H2 2020–H1 2021, from $6,189,388 to $7,165,387. The number of offers to sell access to companies almost tripled over the review period: from 362 to 1,099. This exclusive data was obtained by Group-IB’s Threat Intelligence & Attribution system, which gathers even deleted information from cybercriminal underground forums.

This segment of the cybercriminal underground has a relatively low entry barrier. Poor corporate cyber risk management combined with the fact that tools for conducting attacks against corporate networks are widely available both contributed to a record-breaking rise in the number of initial access brokers. In H2 2019–H1 2020, the Group-IB Threat Intelligence team detected only 86 active brokers. In H2 2020–H1 2021, however, this number skyrocketed to 262, with 229 new players joining the roster.

Most companies affected belonged to the manufacturing (9% of all companies), education (9%), financial services (9%), healthcare (7%), and commerce (7%). In the review period, the number of industries exploited by initial access brokers surged from 20 to 35, which indicates that cybercriminals are becoming aware of the variety of potential victims.

The geography of initial access brokers’ operations has also expanded. In H2 2020–H1 2021, the number of countries where cybercriminals broke into corporate networks increased from 42 to 68. US-based companies are the most popular among sellers of access to compromised networks — they account for 30% of all victim-companies in H2 2020–H1 2021, followed by France (5%), and the UK (4%).

In the Middle East alone, the total cost of all the accesses to the region’s companies available in the underground rose by 37% in the review period and totaled $247,836. Most of the accesses on the sale belonged to organisations from the United Arab Emirates (24%), which was followed by Israel (13%) and Turkey (13%), and Saudi Arabia (12%)and Iran (12%).

One of the main driving forces for initial access market growth is the steep increase in the number of ransomware attacks. Initial access brokers remove the need for ransomware operators to break into corporate networks on their own.

Lock, Lock Who’s There? Corporansom

The unholy alliance of initial access brokers and ransomware operators as part of Ransomware-as-as-a-Service (RaaS) affiliate programs has led to the rise of the ransomware empire. In total, data relating to 2,371 companies were released on DLSs (Data Leak Sites) over H2 2020–H1 2021. This is an increase of an unprecedented 935%compared to the previous review period, when data relating to 229 victims was made public.

Thanks to the Threat Intelligence & Attribution system, Group-IB researchers were able to trace how the ransomware empire has evolved since it appeared. Group-IB’s team analysed private Ransomware affiliate programs, DLSs where they post exfiltrated data belonging to victims who refused to pay the ransom, and the most aggressive ransomware strains.

Over the review period, Group-IB analysts identified 21 new Ransomware-as-a-Service (RaaS) affiliate programs, which is a 19% increase compared to the previous period. During the review period, the cybercriminals mastered the use of DLSs, which are used as an additional source of pressure on their victims to make them pay the ransom by threatening to leak their data. In practice, however, victims can still find their data on the DLS even if the ransom is paid. The number of new DLSs more than doubled during the review period and reached 28, compared to 13 in H2 2019–H1 2020.

It is noteworthy that in the first three quarters of this year, ransomware operators released 47-percent more data on the attacked companies than in the entire 2020. Taking into account that cybercriminals release the data on only about 10 percent of their victims, the actual number of ransomware attack victims is dozens more. The number of companies that opt for paying ransom is estimated at 30%.

Having analysed ransomware DLS in 2021, Group-IB analysts concluded that Conti became the most aggressive ransomware group, which made public information about 361 victims (16.5% of all victim companies whose data was released on DLS), followed by Lockbit (251), Avaddon (164), REvil (155), and Pysa (118). Last year’s Top 5 was as follows: Maze (259), Egregor (204), Conti (173), REvil (141), and Pysa (123).

Country-wise, most companies whose data was posted on DLSs by ransomware operators in 2021 were based in the United States (968), Canada (110), and France (103), while most organisations affected belonged to the manufacturing (9.6%), real estate (9.5%), and transportation industries (8.2%).

In the Middle Eastern region at least 50 organisations fell prey to ransomware attacks so far in 2021. To compare, in 2020, the data on 27 companies in the Middle Easter region was released on DLS, which is an increase of 85%. In the current year, the majority of publicly known ransomware attack victims in the Middle East originated from Turkey(20%), the United Arab Emirates (18%), Saudi Arabia (18%), Israel (10%), and Iran (6%).

The Scamdemic  

Another cohort of cybercriminals actively forging partnerships over the review period were scammers. In recent years, phishing and scam affiliate programs have become highly popular. The research conducted by Group-IB revealed that there are more than 70 phishing and scam affiliate programs. Participants aim to steal money as well as personal and payment data. In the reporting period, the threat actors who took part in such schemes pocketed at least $10 million in total. The average amount stolen by a scam affiliate program member is estimated at $83.

Affiliate programs involve large numbers of participants, have a strict hierarchy, and use complex technical infrastructures to automate fraudulent activities. Phishing and scam affiliate programs actively use Telegram bots that provide participants with ready-to-use scam and phishing pages. This helps scale phishing campaigns and tailor them to banks, popular email services, and other organisations.

Phishing and scam affiliate programs, initially focused on Russia and other CIS countries, recently started their online migration to Europe, America, Asia, and the Middle East. This is exemplified by Classiscam: an automated scam-as-a-service designed to steal money and payment data. Group-IB is aware of at least 71 brands from 36 countries impersonated by affiliate program members. Phishing and scam websites create by affiliate program members most often mimic marketplaces (69.5%), delivery services (17.2%), and carpooling services (12.8%).

Carding: The Joker’s Last Laugh

Over the review period, the carding market dropped by 26%, from $1.9 billion to $1.4 billion compared to the previous period. The decrease can be explained by the lower number of dumps (data stored on the magnetic stripe on bank cards) offered for sale: the number of offers shrank by 17%, from 70 million records to 58 million, due to the infamous card shop Joker’s Stash shutting down. Meanwhile, the average price of a bank card dump fell from $21.88 to $13.84, while the maximum price surged from $500 to $750.

An opposite trend was recorded on the market for the sale of bank card text data (bank card numbers, expiration dates, names of owners, addresses, CVVs): their number soared by 36%, from 28 million records to 38 million, which amongst others can be explained by the higher number of phishing web resources mimicking famous brands during the pandemic. The average price for text data climbed from $12.78 to $15.2, while the maximum price skyrocketed 7-fold: from $150 to an unprecedented $1,000.

The Middle East stuck to the global trend and showed the carding market drop of 49% in the review period: it decreased from $47.6 million in H2 2019 – H1 2020 to $24.4 million in H2 2020 – H1 2021. The total number of the bank cards belonging to the bank customers in the Middle East offered for sale over the examined period totaled 1,546,842, which is a 34-percent decline compared to the previous review period, when 2,353,854 bank card records were offered.

This was accompanied by the increase in the average price of text card data from $8.95 to $14.09 and a dramatic drop in the price of a dump from $69.82 to $22.91.

Related Articles

  • The Middle East leads the global race to build sovereign AI platforms
  • Kaspersky warns of a credential-stealing campaign on Facebook
  • Australia records increase in scam-based financial losses
[easy-social-share buttons="facebook,twitter,google,linkedin,stumbleupon,pinterest" counters=0 hide_names="force" fixedwidth="yes" fixedwidth_px="111"]
Carding crime trends featured5 Initial Access Brokers phishing ransomware scamdemic

Previous Article86% of healthcare organisations provide telehealth services, yet more than half face patients’ mistrust towards privacyNext ArticleIntuitive Networks: The Foundation for Smart and Sustainable Cities

Related Articles

  • Cognite expands global footprint to accelerate Industrial AI adoption in the region
  • Can U.S. power grids keep up with the data centre boom? 
  • Opinion: TeKnowledge CTO on the Enterprise AI Execution Gap
tahawultech tahawultech.com @tahawultech ·
3 Oct

"Qlik Predict embeds trusted forecasts directly in workflows, so frontline teams build and use models through a no-code experience while IT retains governance and auditability".
Learn more about @qlik's product below.
https://www.tahawultech.com/industry/technology/qlik-predict-brings-no-code-forecasting-to-real-world-enterprise-ai/
#Qlik #tahawultech

Reply on Twitter 1974100388799533157 Retweet on Twitter 1974100388799533157 Like on Twitter 1974100388799533157 1 Twitter 1974100388799533157
tahawultech tahawultech.com @tahawultech ·
3 Oct

Jayesh Nandanan from Mediclinic Middle East wins a CISO50 Award, congratulations.
#CISO50FSA2025 #tahawultech

Reply on Twitter 1974097958535848286 Retweet on Twitter 1974097958535848286 Like on Twitter 1974097958535848286 Twitter 1974097958535848286
tahawultech tahawultech.com @tahawultech ·
3 Oct

Jayesh Nandanan from Mediclinic Middle East wins a CISO50 Award, congratulations.
#CISO50FSA2025 #tahawultech

Reply on Twitter 1974096828749713827 Retweet on Twitter 1974096828749713827 Like on Twitter 1974096828749713827 Twitter 1974096828749713827
Load More

RECOMMENDED FOR YOU

  • 91% of Security Leaders Admit to Cloud Security Trade-Offs
  • 80% of cyberattacks in the Middle East lead to confidential data breaches
  • SAS explores fortifying financial resilience with AI and advanced analytics
  • 1st of April joke or a cyberattack – Kaspersky’s tips to avoid both

GET TAHAWULTECH.COM IN YOUR INBOX

The free newsletter covering the top industry headlines

CPI Media Group
TahawulTech.com is the definitive platform in the Middle East for IT content. Covering stories across enterprise technology, cybersecurity and the region’s IT channel industry, TahawulTech.com brings business leaders and technology decision makers together to share their stories of transformation.

OTHER LINKS

  • Events and Conferences
  • Media Pack
  • Resource Centre
  • Subscription

 

  • Advertise
  • Contact Us
  • Privacy Policy

Contact Us

Office:
Office 1307, Dubai Studio City
Dubai, United Arab Emirates, PO Box 13700
Tel: +971 4 568 2993
Email: info@tahawultech.com
© 2025 All Rights Reserved. Product of CPI
Menu
  • Region
    • UAE
    • Saudi Arabia
    • Oman
    • Bahrain
    • Kuwait
    • Africa
    • Middle East
    • Global
  • Industry
    • Education
    • Energy
    • Financial services
    • Government
    • Healthcare
    • Property
    • Retail
    • Technology
    • Transport & Logistics
    • Travel & Hospitality
  • Company
    • Enterprise
    • Corporate
    • SME
    • Startup
    • Vendor
    • Channel
  • Trending
    • Digital Transformation
      • Internet of Things
      • Big Data
      • Blockchain
      • Smart City
      • Cloud Computing
    • Artificial Intelligence
      • Data Centre
      • Machine Learning
      • Virtual Reality
      • Robotics
      • Systems Integrator
      • E-commerce
    • 3D Printing
      • Self-driving Cars
      • Drones
      • Automation
      • Smartphones
      • Wearables
      • Virtualisation
    • Fintech
      • Storage
      • Mobile Payment
      • Startups
      • Applications
      • Security
  • News
    • All News
    • Software
    • Hardware
    • Networking
    • Security
    • Channel
    • Telecoms
    • Video
  • Features
    • Features
    • CIO Spotlight
    • Case Studies
    • Partner Watch
    • Vendor focus
    • Analysis
    • Video
    • Lifestyle
    • Insight
    • Opinion
    • Blogs
  • News
    • Region
  • Magazines
    • CNME
    • Reseller ME
    • Security Advisor ME
    • 60 Minutes
    • Supplements
  • Events & Conferences
    • Awards
    • Customer Events
    • Forums
    • Your Voice
    • Webinars
  • GITEX 2025
  • Bitz News
    • Business News
    • Financial News
  • Example Column Title
    • Bitz News Group Websites:
    • Insider Journal
    • Business Day
    • Weekly Selection
    • Tech News
    • Cool Stories
    • Geek Reviews
 

Loading Comments...
 

    tahawultech.com Intro