Threat Intelligence

7/25/2017
12:00 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

No More Ransom celebrates its first year

Over 28,000 devices decrypted and 100+ global partners signed up.

Woburn, MA – One year ago on July 25, 2016, the No More Ransom initiative was launched by the Dutch National Police, Europol, McAfee and Kaspersky Lab. Today, more than 100 partners have joined the initiative, as major ransomware attacks continue to dominate the news, hitting businesses, governments, and individuals all over the world.

The threat of ransomware is escalating

Ransomware attacks have soared since 2012, luring criminals with the promise of profit and ease of implementation. More new ransomware families, variants of existing families and attacks are uncovered every day. The total number of people worldwide who encountered ransomware rose to 2,581,026 from April 2016 to March 2017, an increase of 11.4 percent over the previous 12 months.

As the threat continues to evolve, becoming stealthier and more destructive, businesses are often targeted as they offer much higher potential returns than individuals. The indiscriminate WannaCry attacks in mid-May claimed more than 300,000 business victims across 150 countries in its first few days, crippling critical infrastructure and halting business operations worldwide.

No More Ransom’s first year in numbers

The No More Ransom site now carries 54 decryption tools, provided by nine partners and covering 104 families of ransomware. So far, these tools have managed to decrypt more than 28,000 devices.

The portal has had more than 1.3 million unique visitors to date. On May 14 alone, during the WannaCry crisis, 150,000 people visited the website.

The No More Ransom platform is now available in 26 languages, with the most recent additions being Bulgarian, Chinese, Czech, Greek, Hungarian, Indonesian, Malay, Norwegian, Romanian, Swedish, Tamil and Thai.

More than 100 partners: No boundaries between private, public or competitors

No More Ransom now has 109 partners. The most recent private sector additions include: Abelssoft, Ascora GmbH, Barclays, Bitsight, Bournemouth University, CERT.BE, Claranet, CSA Singapore, ESTSecurity, Fortinet, Global Forum on Cyber Expertise, InterWorks, IPA, Korean Internet & Security Agency, TWCERT/CC, LLC, University of Porto and vpnMentor. Four new law enforcement agencies have also joined from Czech Republic, Greece, Hong Kong and Iran.

The success of the No More Ransom initiative is a shared success, one that cannot be achieved by law enforcement or private industry alone. By joining forces, we enhance our ability to take on the criminals and stop them from harming people, businesses, and critical infrastructure, once and for all.

No better cure than prevention

Global law enforcement, in close cooperation with private partners, has ongoing investigations into ransomware criminals and infrastructure; however, prevention is undoubtedly the best ransomware defense. Internet users need to avoid becoming a victim in the first place. Many up-to-date prevention tips are available on www.nomoreransom.org. If you do become a victim, it is important not to pay the ransom and report your infection to the police.

 

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Microsoft President: Governments Must Cooperate on Cybersecurity
Kelly Sheridan, Staff Editor, Dark Reading,  11/8/2018
Why the CISSP Remains Relevant to Cybersecurity After 28 Years
Steven Paul Romero, SANS Instructor and Sr. SCADA Network Engineer, Chevron,  11/6/2018
5 Reasons Why Threat Intelligence Doesn't Work
Jonathan Zhang, CEO/Founder of WhoisXML API and TIP,  11/7/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Online Malware and Threats: A Profile of Today's Security Posture
Online Malware and Threats: A Profile of Today's Security Posture
This report offers insight on how security professionals plan to invest in cybersecurity, and how they are prioritizing their resources. Find out what your peers have planned today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-15452
PUBLISHED: 2018-11-13
A vulnerability in the DLL loading component of Cisco Advanced Malware Protection (AMP) for Endpoints on Windows could allow an authenticated, local attacker to disable system scanning services or take other actions to prevent detection of unauthorized intrusions. To exploit this vulnerability, the ...
CVE-2018-15771
PUBLISHED: 2018-11-13
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an information disclosure vulnerability. A malicious boxmgmt user may potentially be able to determine the existence of any system file via Boxmgmt CLI.
CVE-2018-15772
PUBLISHED: 2018-11-13
Dell EMC RecoverPoint versions prior to 5.1.2.1 and RecoverPoint for VMs versions prior to 5.2.0.2 contain an uncontrolled resource consumption vulnerability. A malicious boxmgmt user may potentially be able to consume large amount of CPU bandwidth to make the system slow or to determine the existen...
CVE-2018-15795
PUBLISHED: 2018-11-13
Pivotal CredHub Service Broker, versions prior to 1.1.0, uses a guessable form of random number generation in creating service broker's UAA client. A remote malicious user may guess the client secret and obtain or modify credentials for users of the CredHub Service.
CVE-2018-18591
PUBLISHED: 2018-11-13
A potential unauthorized disclosure of data vulnerability has been identified in Micro Focus Service Manager versions: 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, 9.41, 9.50, 9.51. The vulnerability could be exploited to release unauthorized disclosure of data.