Ransomware
Ransomware is the most dangerous and insidious cybersecurity threat facing the UK, according to the head of the National Cyber Security Centre. "What I find most worrying isn’t the activity of state actors. Nor is it an improbable cyber armageddon. What I worry most about is the cumulative effect of a potential failure to manage cyber risk and the failure to take the threat of cyber criminality seriously," Lindy Cameron said. Of course, hostile governments may very well turn a blind eye to the activities of ransomware gangs, because the real disruption aligns perfectly with their own aims.
This week, it emerged that the latest victim of the REvil ransomware gang was ...a US nuclear weapons contractor. "The investigation is ongoing, but we recently determined that an unauthorised individual acquired certain documents from our system," Sol Oriens said. The statement comes after ransomware caused significant disruption to fuel supplies in the US and meat processing globally. Following their meeting in Cornwall, G7 leaders demanded Russia stop sheltering ransomware gangs, a call reinforced during President Biden's meeting with President Putin in Geneva. We aren't holding our breath.
This week saw some great background articles on the reality of ransomware. Kevin Beaumont describes the "hard truth" about the issue; "we aren’t prepared, it’s a battle with new rules, and it hasn’t near reached peak impact." And veteran security journalist, Brian Krebs, explains how "a self-employed web site designer and mother of two" ended up working for one of the world’s most rapacious cybercriminal groups while leaving a trail of clues about her involvement. Alas, despite recent law enforcement successes (the latest in Ukraine), ransomware is a critical risk for all organisations and it's essential to guard against it.
