National Crime Agency lists cyber criminals as major UK threat
Organised crime increasingly looking to compromise UK networks to steal data
The National Crime Agency (NCA) has identified five key areas where cybercriminals are a threat to UK businesses and the public.
The organisation said the targeted compromise of UK networks to modify, delete or steal data to gain a competitive advantage was an increasing threat. This type of attack was also used by criminals to undermine user confidence, inflict reputational damage or to gain control of infrastructure.
It also said the UK will see an increase in use in targeted disruption of access to UK networks and services as DDoS protocols capable of launching powerful attacks against business critical systems grew in numbers. The NCA said ransomware attacks would increase and move from individuals to organisations.
The NCA forecasts that over the next three years there would be an increasing volume of cyber-dependent criminality, due to traditional' crime groups utilising the as-a-service' nature of the cybercrime marketplace. It warned that UK law enforcement had a limited capacity and capability to respond to such threats.
Support services critical to cyber-dependent crime success are increasingly being used by others, extending the gap between law enforcement and criminal capacity and capability, it said.
Another continual threat was from the large scale harvesting of personal and business data to commit fraud offences against UK individuals and organisations. The NCA said this would likely remain a constant threat with bespoke variants of malware and criminal tools targeting mobile tech likely to increase over the next 36 months.
"Over the last two decades, the internet and digital communications technology have steadily increased their penetration into all sectors of UK society and business. More and more government and public services are going online and it is likely that attempted cyber attacks against government services will increase," the report said.
"Awareness of how far cyber-enabled crime has permeated into local and regional serious and organised criminal groups is currently uneven," it added. "Criminals chase higher returns and seek to exploit less mature security measures, which makes cyber the leading channel for committing multiple types of economic crime."
-
True tech sovereignty could be a bridge too far for EuropeAnalysis “Persistent dependencies” on US tech providers and slow progress mean sovereignty efforts could fall flat
-
Health tech firm Craneware admits “significant volume” of customer and employee data exposed in cyber attackNews The incident has been contained and Craneware has launched a probe into the breach
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
