Ransomware attacks in the UK increased by 80% in the last three months as hackers continue to take advantage of mass remote working, according to security researchers at Check Point.
The findings show that the daily global average of ransomware attacks jumped 50% in last 3 months, compared to first half of 2020.
Countries with the most notable increase in ransomware attacks were the US (98.1%), where the most often targeted sector was healthcare, as well as Germany (145%), Spain (160%), and Sri Lanka, which saw attacks skyrocketed by 436%.
Canon hit by suspected Maze ransomware attack The most popular ransomware strains targeting UK businesses IBM: Ransomware incidents "exploded" in June
The most often used ransomware strains in the last three months were found to be Maze and Ryuk. According to Check Point, the latter now attacks an average of 20 organisations a week.
Check Point’s head of Threat Intelligence Lotem Finkelsteen said that ransomware is “breaking records in 2020”.
“The increase in ransomware attacks began with the advent of the coronavirus pandemic, as organizations scrambled to enact remote workforces, leaving significant gaps in their IT systems.
"However, the last three months alone have shown alarming surges in ransomware attacks, and I suspect the ransomware threat to get far more worse as we approach the new year,” he said, urging organisations “to be extra vigilant”.
According to Finkelsteen, the most significant drivers behind the recent surge in attacks are the victims’ willingness to pay, as well as the rise in increasingly sophisticated attacks, such as Double Extortion and the Emotet malware, which recently made a comeback after five month of absence.
Last week, the US Treasury warned that companies that agree to hand over cash to hackers to free their systems from ransomware may face prosecution or penalties.
RELATED RESOURCE
The advisory cited cyber attacks that were linked to hacking groups from North Korea and Russia, which are both nations sanctioned by the US. The US government often imposes economic and trade sanctions on countries that it deems sponsors terrorism or that violate human rights.
In order to ensure an organisations safety, Check Point’s security researchers recommended taking additional precautions, such as educating employees on how to identify and avoid potential ransomware attacks, ensuring that all systems have the latest patches applied, and maintaining regular backups of data.
-
Prolific ransomware operator added to Europe’s Most Wanted list as US dangles $10 million rewardNews The US Department of Justice is offering a reward of up to $10 million for information leading to the arrest of Volodymyr Viktorovych Tymoshchuk, an alleged ransomware criminal.
-
Jaguar Land Rover “did the right thing” shutting down systems to thwart cyber attackNews The attack on Jaguar Land Rover highlights the growing attractiveness of the automotive sector
-
Ransomware attack on IT supplier disrupts hundreds of Swedish municipalitiesNews The attack on IT systems supplier Miljödata has impacted public sector services across the country
-
A notorious hacker group is ramping up cloud-based ransomware attacksNews The Storm-0501 threat group is refining its tactics, according to Microsoft, shifting away from traditional endpoint-based attacks and toward cloud-based ransomware.
-
Security researchers have just identified what could be the first ‘AI-powered’ ransomware strain – and it uses OpenAI’s gpt-oss-20b modelNews Using OpenAI's gpt-oss:20b model, ‘PromptLock’ generates malicious Lua scripts via the Ollama API.
-
Data I/O shuts down systems in wake of ransomware attack
News Regulatory filings by Data I/O suggest the costs of dealing with the attack could be significant
-
Average ransom payment doubles in a single quarterNews Targeted social engineering and data exfiltration have become the biggest tactics as three major ransomware groups dominate
-
BlackSuit ransomware gang taken down in latest law enforcement sting – but members have already formed a new groupNews The notorious gang has seen its servers taken down and bitcoin seized, but may have morphed into a new group called Chaos
