Free decryption tools provided by Europol has saved organisations his by ransomware from paying out more than $100 million to cyber criminals.
The No More Ransom campaign was launched by the European Union Agency for Law Enforcement Cooperation, known more commonly as Europol, in 2016 in association with a number of cyber security firms.
More than 200,000 victims have downloaded the agency's free anti-ransomware tools to date, meaning criminals have lost out on $108 million (approximately 87.6 million) in profit, according to figures released by Europol on the initiative's third anniversary.
The GandCrab ransomware alone, considered among the most successful and aggressive strains, has led to 40,000 decryptions using No More Ransom's tools, which prevented criminals from scoring $50 million.
Since its inception in July 2016, the multinational co-operation has released 82 tools free of charge to businesses, with those tools targeting 109 ransomware families. This is in addition to three million website visits to date.
Furthermore, there are now 151 partners who feed into the project, comprising 42 law enforcement agencies, five EU agencies and 101 public and private organisations. These include cyber security firms like McAfee, Avast and Bitdefender.
South Korea alone is responsible for 21.5% of all traffic to the project, followed by the US and the Netherlands, with 9.5% and 7.5% of traffic respectively.
"When we take a close look at ransomware, we see how easy a device can be infected in a matter of seconds," said the head of Europol's European Cybercrime Centre Steven Wilson. "A wrong click and databases, pictures and a life of memories can disappear forever.
"No More Ransom brings hope to the victims, a real window of opportunity, but also delivers a clear message to the criminals: the international community stands together with a common goal, operational successes are and will continue to bring the offenders to justice."
In the time that No More Ransom has been running, the scale of the threat facing businesses has exploded. Despite a fall between 2017 and 2018, UK organisations experienced a 195% rise in attacks in the first half of 2019.
This has been explained by a preference among cyber criminals for ransomware as a service (RaaS) tools, as well as open-source malware kits coming down in cost, according to a report by SonicWall.
Last week also saw ransomware attacks take down critical public infrastructure in sites across the world. These included the energy supply in the city of Johanessburg, South Africa, and the IT systems of three school districts in the US state of Louisiana.
The scale of success for Europol's No More Ransom campaign is illustrated by the fact it saved organisations 6.5 million only two years ago, versus almost 100 million now.
-
Prolific ransomware operator added to Europe’s Most Wanted list as US dangles $10 million rewardNews The US Department of Justice is offering a reward of up to $10 million for information leading to the arrest of Volodymyr Viktorovych Tymoshchuk, an alleged ransomware criminal.
-
Jaguar Land Rover “did the right thing” shutting down systems to thwart cyber attackNews The attack on Jaguar Land Rover highlights the growing attractiveness of the automotive sector
-
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalitiesNews The attack on IT systems supplier Miljödata has impacted public sector services across the country
-
A notorious hacker group is ramping up cloud-based ransomware attacksNews The Storm-0501 threat group is refining its tactics, according to Microsoft, shifting away from traditional endpoint-based attacks and toward cloud-based ransomware.
-
Security researchers have just identified what could be the first ‘AI-powered’ ransomware strain – and it uses OpenAI’s gpt-oss-20b modelNews Using OpenAI's gpt-oss:20b model, ‘PromptLock’ generates malicious Lua scripts via the Ollama API.
-
Data I/O shuts down systems in wake of ransomware attack
News Regulatory filings by Data I/O suggest the costs of dealing with the attack could be significant
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
