Threat Intelligence

7/25/2017
12:00 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

No More Ransom celebrates its first year

Over 28,000 devices decrypted and 100+ global partners signed up.

Woburn, MA – One year ago on July 25, 2016, the No More Ransom initiative was launched by the Dutch National Police, Europol, McAfee and Kaspersky Lab. Today, more than 100 partners have joined the initiative, as major ransomware attacks continue to dominate the news, hitting businesses, governments, and individuals all over the world.

The threat of ransomware is escalating

Ransomware attacks have soared since 2012, luring criminals with the promise of profit and ease of implementation. More new ransomware families, variants of existing families and attacks are uncovered every day. The total number of people worldwide who encountered ransomware rose to 2,581,026 from April 2016 to March 2017, an increase of 11.4 percent over the previous 12 months.

As the threat continues to evolve, becoming stealthier and more destructive, businesses are often targeted as they offer much higher potential returns than individuals. The indiscriminate WannaCry attacks in mid-May claimed more than 300,000 business victims across 150 countries in its first few days, crippling critical infrastructure and halting business operations worldwide.

No More Ransom’s first year in numbers

The No More Ransom site now carries 54 decryption tools, provided by nine partners and covering 104 families of ransomware. So far, these tools have managed to decrypt more than 28,000 devices.

The portal has had more than 1.3 million unique visitors to date. On May 14 alone, during the WannaCry crisis, 150,000 people visited the website.

The No More Ransom platform is now available in 26 languages, with the most recent additions being Bulgarian, Chinese, Czech, Greek, Hungarian, Indonesian, Malay, Norwegian, Romanian, Swedish, Tamil and Thai.

More than 100 partners: No boundaries between private, public or competitors

No More Ransom now has 109 partners. The most recent private sector additions include: Abelssoft, Ascora GmbH, Barclays, Bitsight, Bournemouth University, CERT.BE, Claranet, CSA Singapore, ESTSecurity, Fortinet, Global Forum on Cyber Expertise, InterWorks, IPA, Korean Internet & Security Agency, TWCERT/CC, LLC, University of Porto and vpnMentor. Four new law enforcement agencies have also joined from Czech Republic, Greece, Hong Kong and Iran.

The success of the No More Ransom initiative is a shared success, one that cannot be achieved by law enforcement or private industry alone. By joining forces, we enhance our ability to take on the criminals and stop them from harming people, businesses, and critical infrastructure, once and for all.

No better cure than prevention

Global law enforcement, in close cooperation with private partners, has ongoing investigations into ransomware criminals and infrastructure; however, prevention is undoubtedly the best ransomware defense. Internet users need to avoid becoming a victim in the first place. Many up-to-date prevention tips are available on www.nomoreransom.org. If you do become a victim, it is important not to pay the ransom and report your infection to the police.

 

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Microsoft President: Governments Must Cooperate on Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/8/2018
To Click or Not to Click: The Answer Is Easy
Kowsik Guruswamy, Chief Technology Officer at Menlo Security,  11/14/2018
Veterans Find New Roles in Enterprise Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/12/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Online Malware and Threats: A Profile of Today's Security Posture
Online Malware and Threats: A Profile of Today's Security Posture
This report offers insight on how security professionals plan to invest in cybersecurity, and how they are prioritizing their resources. Find out what your peers have planned today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-19279
PUBLISHED: 2018-11-14
PRIMX ZoneCentral before 6.1.2236 on Windows sometimes leaks the plaintext of NTFS files. On non-SSD devices, this is limited to a 5-second window and file sizes less than 600 bytes. The effect on SSD devices may be greater.
CVE-2018-19280
PUBLISHED: 2018-11-14
Centreon 3.4.x has XSS via the resource name or macro expression of a poller macro.
CVE-2018-19281
PUBLISHED: 2018-11-14
Centreon 3.4.x allows SNMP trap SQL Injection.
CVE-2018-17960
PUBLISHED: 2018-11-14
CKEditor 4.x before 4.11.0 allows user-assisted XSS involving a source-mode paste.
CVE-2018-19278
PUBLISHED: 2018-11-14
Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV or NAPTR response, because a buffer size is supposed to match an expanded length but actually matches a compressed lengt...