The most active hacker group in the world at the end of March was Locbkit. They accounted for 38% of all ransomware attacks between January and March 2022, according to information security experts at Digital Shadows.

In second place is Conti. The result of this grouping is 20%. Thus, only two groups accounted for more than half of the attacks worldwide – more than 300 incidents out of 582. On the third, fourth, and fifth places were the Hive, Alpha, and Lv groups. For each of the associations, there are several times fewer attacks than for Conti – from 25 to 30.

Despite this, according to the results of the first quarter of 2022, Digital Shadows specialists noted a decrease in the total number of incidents involving ransomware viruses. As noted above, 582 attacks were registered from January to March 2022, which is 25% less than in the fourth quarter of 2021. Experts attribute this not so much to a decrease in the activity of hackers, but to their course towards secrecy: attackers are less and less likely to attract attention by publishing news about their raids.