Ransomware Surge: AI-Driven Attacks, Industrial Targets, and Extortion Expand Globally; Political Violence & Peru Bombing

Ransomware attacks are escalating globally, with a significant rise in data-theft-driven extortion and attacks leveraging remote access tools. Industrial operations are increasingly targeted, and AI is being used to automate reconnaissance and data theft. Australia is experiencing a surge in cyberattacks, while a bombing in Peru underscores rising organized crime and extortion. Political violence risks are also escalating, as evidenced by a bomb threat against the Australian Prime Minister. ## Latest Update The most recent report details a bombing in a nightclub in northern Peru, injuring over 30 people. Authorities are investigating the incident as an act of extortion by organized crime syndicates, highlighting a surge in violent tactics linked to government corruption. ## Timeline * **2026-02-12:** Threat actors are abusing employee monitoring software (bossware) like Net Monitor for Employees Professional to blend into corporate networks and deploy ransomware. * **2026-02-13:** Ransomware attacks surged dramatically in early 2025, setting record highs and forcing a reassessment of cybersecurity strategies. * **2026-02-17:** Ransomware attacks targeting industrial operations saw a significant surge in 2025, with a 49% increase in the number of groups involved. * **2026-02-17:** Publicly disclosed ransomware attacks increased by 49% year-over-year, with AI being used in ransomware campaigns for reconnaissance and data theft. * **2026-02-17:** Data extortion incidents surged 11-fold in 2025, with attackers increasingly leveraging remote access tools. * **2026-02-18:** The number of active ransomware groups hit an all-time high in 2025, with victim growth rates doubling. * **2026-02-18:** Australian organizations are experiencing the highest rate of material cyberattacks globally, with 85% reporting an impact in the past year. * **2026-02-25:** A bomb threat against the Australian Prime Minister is treated as an indicator of a deteriorating security environment for politicians. * **2026-03-07:** A nightclub bombing in northern Peru injures over 30 people, suspected as extortion by organized crime. ## What to Watch * **Expansion of AI-driven ransomware:** Monitor for further adoption of AI in ransomware attacks, including automation of reconnaissance, exploitation, and data theft. * **Industrial sector vulnerabilities:** Prepare for continued targeting of industrial operations, focusing on securing remote access portals and OT environments. * **Geopolitical instability:** Be aware of potential spillover effects from political instability and organized crime in regions like Latin America, including increased cyber and physical threats.