Threat Intelligence

7/25/2017
12:00 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

No More Ransom celebrates its first year

Over 28,000 devices decrypted and 100+ global partners signed up.

Woburn, MA – One year ago on July 25, 2016, the No More Ransom initiative was launched by the Dutch National Police, Europol, McAfee and Kaspersky Lab. Today, more than 100 partners have joined the initiative, as major ransomware attacks continue to dominate the news, hitting businesses, governments, and individuals all over the world.

The threat of ransomware is escalating

Ransomware attacks have soared since 2012, luring criminals with the promise of profit and ease of implementation. More new ransomware families, variants of existing families and attacks are uncovered every day. The total number of people worldwide who encountered ransomware rose to 2,581,026 from April 2016 to March 2017, an increase of 11.4 percent over the previous 12 months.

As the threat continues to evolve, becoming stealthier and more destructive, businesses are often targeted as they offer much higher potential returns than individuals. The indiscriminate WannaCry attacks in mid-May claimed more than 300,000 business victims across 150 countries in its first few days, crippling critical infrastructure and halting business operations worldwide.

No More Ransom’s first year in numbers

The No More Ransom site now carries 54 decryption tools, provided by nine partners and covering 104 families of ransomware. So far, these tools have managed to decrypt more than 28,000 devices.

The portal has had more than 1.3 million unique visitors to date. On May 14 alone, during the WannaCry crisis, 150,000 people visited the website.

The No More Ransom platform is now available in 26 languages, with the most recent additions being Bulgarian, Chinese, Czech, Greek, Hungarian, Indonesian, Malay, Norwegian, Romanian, Swedish, Tamil and Thai.

More than 100 partners: No boundaries between private, public or competitors

No More Ransom now has 109 partners. The most recent private sector additions include: Abelssoft, Ascora GmbH, Barclays, Bitsight, Bournemouth University, CERT.BE, Claranet, CSA Singapore, ESTSecurity, Fortinet, Global Forum on Cyber Expertise, InterWorks, IPA, Korean Internet & Security Agency, TWCERT/CC, LLC, University of Porto and vpnMentor. Four new law enforcement agencies have also joined from Czech Republic, Greece, Hong Kong and Iran.

The success of the No More Ransom initiative is a shared success, one that cannot be achieved by law enforcement or private industry alone. By joining forces, we enhance our ability to take on the criminals and stop them from harming people, businesses, and critical infrastructure, once and for all.

No better cure than prevention

Global law enforcement, in close cooperation with private partners, has ongoing investigations into ransomware criminals and infrastructure; however, prevention is undoubtedly the best ransomware defense. Internet users need to avoid becoming a victim in the first place. Many up-to-date prevention tips are available on www.nomoreransom.org. If you do become a victim, it is important not to pay the ransom and report your infection to the police.

 

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Four Faces of Fraud: Identity, 'Fake' Identity, Ransomware & Digital
David Shefter, Chief Technology Officer at Ziften Technologies,  6/14/2018
Demystifying Mental Health in the Infosec Community
Kelly Sheridan, Staff Editor, Dark Reading,  6/14/2018
Email, Social Media Still Security Nightmares
Dark Reading Staff 6/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2016-10723
PUBLISHED: 2018-06-21
** DISPUTED ** An issue was discovered in the Linux kernel through 4.17.2. Since the page allocator does not yield CPU resources to the owner of the oom_lock mutex, a local unprivileged user can trivially lock up the system forever by wasting CPU resources from the page allocator (e.g., via concurre...
CVE-2017-13072
PUBLISHED: 2018-06-21
Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code.
CVE-2017-2669
PUBLISHED: 2018-06-21
Dovecot before version 2.2.29 is vulnerable to a denial of service. When 'dict' passdb and userdb were used for user authentication, the username sent by the IMAP/POP3 client was sent through var_expand() to perform %variable expansion. Sending specially crafted %variable fields could result in exce...
CVE-2017-2672
PUBLISHED: 2018-06-21
A flaw was found in foreman before version 1.15 in the logging of adding and registering images. An attacker with access to the foreman log file would be able to view passwords for provisioned systems in the log file, allowing them to access those systems.
CVE-2018-0712
PUBLISHED: 2018-06-21
Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions could allow remote attackers to run arbitrary commands or install malware on the NAS.