India has emerged as a major target for ransomware attacks, ranking second in the Asia Pacific and Japan (APJ) region, according to a new report. It has been found that the manufacturing sector was the most impacted, accounting for 28.89 per cent of all attacks. Other vulnerable industries include healthcare and financial services, each facing risks of 8.9 per cent, as well as technology and pharmaceutical sectors, which were targeted in 6.67 per cent of incidents.
As per a Zscaler report, the global ransomware landscape saw an 18 per cent increase in attacks year-over-year, culminating in a record ransom payment of USD 75 million to the Dark Angels group, nearly double the previous highest payout. This trend shows the alarming rise in ransomware-as-a-service models and the evolving tactics of cybercriminals. The findings suggest that organisations must prioritise enhanced security measures to combat these sophisticated threats, particularly as ransomware extortion attacks continue to proliferate across various sectors.
Despite the heightened risk, India’s growth in successful ransomware attacks remained relatively flat, with reported incidents decreasing slightly from 62 in 2023 to 60 in 2024. However, the report noted that vulnerabilities persist, especially with the rapid adoption of AI and machine learning technologies. The surge in AI-related transactions—1.3 billion more than the Europe, the Middle East, and Africa (EMEA) region—has made India a prime target for cyber threats.
"India is at the forefront of digital transformation – leading the way on a global platform when it comes to the adoption of emerging technologies, such as AI/ML, to drive innovation. However, its successes have also drawn the attention of threat actors, making it a prime target for sophisticated cyber threats, including ransomware attacks. With the government's increased focus on driving cybersecurity resilience, it is more crucial than ever for Indian enterprises to adopt zero trust security frameworks," said Suvabrata Sinha, CISO in residence, India at Zscaler.
Among the active ransomware families in India, LockBit leads with a share of 23.33 per cent of the attacks, followed by BianLian at 16.67 per cent, BlackCat at 11.67 per cent, 8Base at 10 per cent, and Mallox at 5 per cent.