UK ransomware attacks surged 80% in latest quarter

Visual representation of ransomware by showing encrypted files on a display
(Image credit: Shutterstock)

Ransomware attacks in the UK increased by 80% in the last three months as hackers continue to take advantage of mass remote working, according to security researchers at Check Point.

The findings show that the daily global average of ransomware attacks jumped 50% in last 3 months, compared to first half of 2020.

Countries with the most notable increase in ransomware attacks were the US (98.1%), where the most often targeted sector was healthcare, as well as Germany (145%), Spain (160%), and Sri Lanka, which saw attacks skyrocketed by 436%.

Canon hit by suspected Maze ransomware attack The most popular ransomware strains targeting UK businesses IBM: Ransomware incidents "exploded" in June

The most often used ransomware strains in the last three months were found to be Maze and Ryuk. According to Check Point, the latter now attacks an average of 20 organisations a week.

Check Point’s head of Threat Intelligence Lotem Finkelsteen said that ransomware is “breaking records in 2020”.

“The increase in ransomware attacks began with the advent of the coronavirus pandemic, as organizations scrambled to enact remote workforces, leaving significant gaps in their IT systems.

"However, the last three months alone have shown alarming surges in ransomware attacks, and I suspect the ransomware threat to get far more worse as we approach the new year,” he said, urging organisations “to be extra vigilant”.

According to Finkelsteen, the most significant drivers behind the recent surge in attacks are the victims’ willingness to pay, as well as the rise in increasingly sophisticated attacks, such as Double Extortion and the Emotet malware, which recently made a comeback after five month of absence.

Last week, the US Treasury warned that companies that agree to hand over cash to hackers to free their systems from ransomware may face prosecution or penalties.


Securing remote work

Safeguarding business continuity


The advisory cited cyber attacks that were linked to hacking groups from North Korea and Russia, which are both nations sanctioned by the US. The US government often imposes economic and trade sanctions on countries that it deems sponsors terrorism or that violate human rights.

In order to ensure an organisations safety, Check Point’s security researchers recommended taking additional precautions, such as educating employees on how to identify and avoid potential ransomware attacks, ensuring that all systems have the latest patches applied, and maintaining regular backups of data.

Sabina Weston

Having only graduated from City University in 2019, Sabina has already demonstrated her abilities as a keen writer and effective journalist. Currently a content writer for Drapers, Sabina spent a number of years writing for ITPro, specialising in networking and telecommunications, as well as charting the efforts of technology companies to improve their inclusion and diversity strategies, a topic close to her heart.

Sabina has also held a number of editorial roles at Harper's Bazaar, Cube Collective, and HighClouds.