Threat Intelligence

7/25/2017
12:00 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

No More Ransom celebrates its first year

Over 28,000 devices decrypted and 100+ global partners signed up.

Woburn, MA – One year ago on July 25, 2016, the No More Ransom initiative was launched by the Dutch National Police, Europol, McAfee and Kaspersky Lab. Today, more than 100 partners have joined the initiative, as major ransomware attacks continue to dominate the news, hitting businesses, governments, and individuals all over the world.

The threat of ransomware is escalating

Ransomware attacks have soared since 2012, luring criminals with the promise of profit and ease of implementation. More new ransomware families, variants of existing families and attacks are uncovered every day. The total number of people worldwide who encountered ransomware rose to 2,581,026 from April 2016 to March 2017, an increase of 11.4 percent over the previous 12 months.

As the threat continues to evolve, becoming stealthier and more destructive, businesses are often targeted as they offer much higher potential returns than individuals. The indiscriminate WannaCry attacks in mid-May claimed more than 300,000 business victims across 150 countries in its first few days, crippling critical infrastructure and halting business operations worldwide.

No More Ransom’s first year in numbers

The No More Ransom site now carries 54 decryption tools, provided by nine partners and covering 104 families of ransomware. So far, these tools have managed to decrypt more than 28,000 devices.

The portal has had more than 1.3 million unique visitors to date. On May 14 alone, during the WannaCry crisis, 150,000 people visited the website.

The No More Ransom platform is now available in 26 languages, with the most recent additions being Bulgarian, Chinese, Czech, Greek, Hungarian, Indonesian, Malay, Norwegian, Romanian, Swedish, Tamil and Thai.

More than 100 partners: No boundaries between private, public or competitors

No More Ransom now has 109 partners. The most recent private sector additions include: Abelssoft, Ascora GmbH, Barclays, Bitsight, Bournemouth University, CERT.BE, Claranet, CSA Singapore, ESTSecurity, Fortinet, Global Forum on Cyber Expertise, InterWorks, IPA, Korean Internet & Security Agency, TWCERT/CC, LLC, University of Porto and vpnMentor. Four new law enforcement agencies have also joined from Czech Republic, Greece, Hong Kong and Iran.

The success of the No More Ransom initiative is a shared success, one that cannot be achieved by law enforcement or private industry alone. By joining forces, we enhance our ability to take on the criminals and stop them from harming people, businesses, and critical infrastructure, once and for all.

No better cure than prevention

Global law enforcement, in close cooperation with private partners, has ongoing investigations into ransomware criminals and infrastructure; however, prevention is undoubtedly the best ransomware defense. Internet users need to avoid becoming a victim in the first place. Many up-to-date prevention tips are available on www.nomoreransom.org. If you do become a victim, it is important not to pay the ransom and report your infection to the police.

 

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Devastating Cyberattack on Email Provider Destroys 18 Years of Data
Jai Vijayan, Freelance writer,  2/12/2019
Up to 100,000 Reported Affected in Landmark White Data Breach
Kelly Sheridan, Staff Editor, Dark Reading,  2/12/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-1695
PUBLISHED: 2019-02-15
IBM QRadar SIEM 7.2 and 7.3 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 134177.
CVE-2018-1701
PUBLISHED: 2019-02-15
IBM InfoSphere Information Server 11.7 could allow an authenciated user under specialized conditions to inject commands into the installation process that would execute on the WebSphere Application Server. IBM X-Force ID: 145970.
CVE-2018-1727
PUBLISHED: 2019-02-15
IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 147630.
CVE-2018-1895
PUBLISHED: 2019-02-15
IBM InfoSphere Information Server 11.3, 11.5, and 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ...
CVE-2019-4059
PUBLISHED: 2019-02-15
IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583.