Ransomware attacks on UK businesses soar 195%
The figure marks a marked shift against the steep decline in the attack method last year


The UK has been the biggest target for ransomware attacks for the first half of 2019 with the number rising 195%, as compared to the 59% reduction in attacks of the same kind in 2018, it has been claimed.
SonicWall, which authored the report, said the number of recorded attacks sits at 6.4 million for the first half of the year and has been largely attributed to the growing preference of criminals for ransomware as a service (RaaS), as well as open-source malware kits becoming cheaper and more readily available online.
"Globally, cybercriminals continue to pivot toward new tactics and that's bad news because ransomware-as-a-service allows less programming-skilled actors into the malware game, and some targets are twice-victimised," said Bill Conner, SonicWall CEO.
Conversely, the US experienced a 21% reduction in ransomware attacks, despite major incidents hitting the headlines in recent weeks.
The Cerber family of RaaS has remained the most effective method of targeting businesses year-on-year, according to SonicWall. 39.5 million recorded cases have been detected already this year, almost 10 times the number of detections of Gandcrab, the second most prolific ransomware strain listed in the report.
While ransomware soared in the UK, overall malware detections dropped in 2019, following a record-breaking 2018 which saw 10.52 billion attacks across the globe. The US and the UK are still the most attacked nations, positioned first and second respectively, but both saw sizable drops in the number of attacks directed towards them.
This can be accounted for by the overall 20% global slowdown of malware attacks compared to last year. 4.78 billion attacks have been detected so far in 2019 while in the same period last year the figure came in at 5.99 billion.
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
In addition to RaaS, another growing threat this year is encrypted malware attacks, which have already seen a 27% jump from 2018.
So far in 2019, researchers detected 2.4 million encrypted malware attacks which is almost the same number detected for the entire year of 2018 (2.8 million) a 76% year-to-date increase.
In other areas, researchers indicated that office files with malicious code embedded within them still remain a consistent threat to businesses, but attacks tend to "ebb and flow" and average out in terms of year-on-year detection.

Connor Jones has been at the forefront of global cyber security news coverage for the past few years, breaking developments on major stories such as LockBit’s ransomware attack on Royal Mail International, and many others. He has also made sporadic appearances on the ITPro Podcast discussing topics from home desk setups all the way to hacking systems using prosthetic limbs. He has a master’s degree in Magazine Journalism from the University of Sheffield, and has previously written for the likes of Red Bull Esports and UNILAD tech during his career that started in 2015.
-
Ransomware victims are taking a tougher stance on negotiating with hackers
News Enterprises are taking a tougher stance on ransomware hackers and refusing to pay up
-
Dell 32 Plus S3225QC monitor review
Reviews Superb image quality and silky smooth motion make a glorious combination – but it’s not a perfect productivity monitor
-
Average ransom payment doubles in a single quarter
News Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new group
News The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
-
Google cyber researchers were tracking the ShinyHunters group’s Salesforce attacks – then realized they’d also fallen victim
News In an update to an investigation on the ShinyHunters group, Google revealed it had also been affected
-
Nearly one-third of ransomware victims are hit multiple times, even after paying hackers
News Many ransomware victims are being hit more than once, largely thanks to fragmented security tactics
-
75% of UK business leaders are willing to risk criminal penalties to pay ransoms
News A ransom payment ban is a great idea - until you're the one being targeted...
-
The Scattered Spider ransomware group is infiltrating Slack and Microsoft Teams to target vulnerable employees
News The group is using new ransomware variants and new social engineering techniques - including sneaking into corporate teleconferences
-
Hackers breached a 158 year old company by guessing an employee password – experts say it’s a ‘pertinent reminder’ of the devastating impact of cyber crime
News A Panorama documentary exposed hackers' techniques and talked to the teams trying to tackle them
-
The ransomware boom shows no signs of letting up – and these groups are causing the most chaos
News Thousands of ransomware cases have already been posted on the dark web this year