Ransomware attacks have surged during the pandemic, with the number of major ransomware groups increasing from four to around 20. This rise in competition among these groups has led to new threats and tactics, making organizations more vulnerable. Additionally, the shift to remote work has expanded the attack surface, as many employees use personal devices and unsecured home networks.

Organizations should prioritize raising cybersecurity awareness across all levels, particularly for remote workers. Regular communication, such as questionnaires to identify security issues, can engage employees effectively. It's also crucial to implement basic precautions, like regular system updates and the use of virtual private networks (VPNs) for remote access.

Ransomware groups often target modestly-sized organizations, particularly those with annual revenues between $20-$100 million. These companies typically have weaker security measures, making them attractive targets. Additionally, successful attacks on these firms are less likely to receive widespread media attention compared to major breaches, allowing attackers to operate with less scrutiny.