Europol’s free ransomware decryption tools save businesses £88m
The No More Ransom campaign sees three million visits to date and 200,000 decryptions
Free decryption tools provided by Europol has saved organisations his by ransomware from paying out more than $100 million to cyber criminals.
The No More Ransom campaign was launched by the European Union Agency for Law Enforcement Cooperation, known more commonly as Europol, in 2016 in association with a number of cyber security firms.
More than 200,000 victims have downloaded the agency's free anti-ransomware tools to date, meaning criminals have lost out on $108 million (approximately 87.6 million) in profit, according to figures released by Europol on the initiative's third anniversary.
The GandCrab ransomware alone, considered among the most successful and aggressive strains, has led to 40,000 decryptions using No More Ransom's tools, which prevented criminals from scoring $50 million.
Since its inception in July 2016, the multinational co-operation has released 82 tools free of charge to businesses, with those tools targeting 109 ransomware families. This is in addition to three million website visits to date.
Furthermore, there are now 151 partners who feed into the project, comprising 42 law enforcement agencies, five EU agencies and 101 public and private organisations. These include cyber security firms like McAfee, Avast and Bitdefender.
South Korea alone is responsible for 21.5% of all traffic to the project, followed by the US and the Netherlands, with 9.5% and 7.5% of traffic respectively.
"When we take a close look at ransomware, we see how easy a device can be infected in a matter of seconds," said the head of Europol's European Cybercrime Centre Steven Wilson. "A wrong click and databases, pictures and a life of memories can disappear forever.
"No More Ransom brings hope to the victims, a real window of opportunity, but also delivers a clear message to the criminals: the international community stands together with a common goal, operational successes are and will continue to bring the offenders to justice."
In the time that No More Ransom has been running, the scale of the threat facing businesses has exploded. Despite a fall between 2017 and 2018, UK organisations experienced a 195% rise in attacks in the first half of 2019.
This has been explained by a preference among cyber criminals for ransomware as a service (RaaS) tools, as well as open-source malware kits coming down in cost, according to a report by SonicWall.
Last week also saw ransomware attacks take down critical public infrastructure in sites across the world. These included the energy supply in the city of Johanessburg, South Africa, and the IT systems of three school districts in the US state of Louisiana.
The scale of success for Europol's No More Ransom campaign is illustrated by the fact it saved organisations 6.5 million only two years ago, versus almost 100 million now.
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
-
Threat actors ditch ‘spray and pray’ attacks in shift to targeted exploitationNews A dip in ransomware volumes points to a more targeted approach focused on vulnerability exploitation
-
Security leaders overconfident about ransomware recovery
News Few manage to recover all their data, and many experience business disruption
-
German authorities want your help finding the hackers behind GandCrab and REvilNews Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk are believed to have made millions from ransomware as a service schemes
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
