Anti-Ransomware Day is a vital reminder of the growing threat of ransomware attacks in our digital world every year. This designated day aims to raise awareness among individuals, businesses, and organizations about the risks associated with ransomware and the critical steps needed to prevent, detect, and respond to such attacks. With cybercriminals constantly evolving their tactics, Anti-Ransomware Day stands as a unified call to action to bolster cybersecurity measures and safeguard valuable data from malicious encryption and extortion. According to the 2024 Verizon Data Breach Investigations Report, ransomware was a top threat across 92% of industries, and roughly one-third of all breaches involved ransomware or some other extortion technique.
Ransomware has emerged as one of the most prevalent and damaging forms of cybercrime, affecting millions of users worldwide and causing significant financial losses. Ransomware gangs reached an unprecedented milestone, surpassing $1 billion in extorted cryptocurrency payments from victims. From small businesses to large enterprises, no entity is immune to the potential devastation wrought by ransomware. Anti-Ransomware Day is a platform to educate stakeholders about ransomware’s various forms, including file-encrypting malware, data theft threats, and targeted attacks on critical infrastructure. By understanding the tactics employed by cybercriminals, individuals and organizations can better protect themselves and mitigate the impact of potential ransomware incidents.
As technology advances and our reliance on digital systems deepens, the importance of observing Anti-Ransomware Day grows more crucial. This day underscores the need for robust cybersecurity practices and encourages collaboration and information sharing among cybersecurity professionals, law enforcement agencies, and the public. Anti-Ransomware Day is pivotal in fortifying our digital defenses and promoting a safer online environment for everyone by fostering a collective effort to combat ransomware threats.
++
Marlena Herrera, Director, Customer Success, Protegrity
“Protecting data from ransomware threats remains a top concern for CISOs and cybersecurity experts. Ransomware’s impact isn’t a matter of “if” but “when” for organizations, as recent breaches across healthcare, government, and finance sectors have demonstrated. Business leaders must prioritize safeguarding sensitive data.
Creating a robust defense against ransomware involves leveraging encryption and tokenization, ensuring continuous security and peace of mind that encrypted data stays safe even if compromised. Cybersecurity professionals must regularly evaluate their data protection strategies to ensure they adhere to the strictest security standards in the fight against ransomware.
This Anti-Ransomware Day, it’s crucial to remember that simply relying on prevention, detection, backup, and recovery isn’t sufficient to defend against ransomware attacks; prioritizing data security is key.”
++
Laurie Mercer, Security Architect, HackerOne
“Ransomware continues to be the most common “end game” cybercriminal scenario, with the number of attacks in March 2024 breaking record. However, while it’s predicted that ransomware will continue to rise throughout the year, Q1 has also witnessed a record low of demands being paid, dropping to only 28%. This decrease could be the result of many things – from a global rise in advanced protective measures to mounting legal pressure, or even due to the fact that cybercriminals repeatedly breach promises once the ransom has been paid.
With a record low of ransomware payments witnessed, does this highlight a possibility that organizations are now prepared for an enforced payment ban? Enforcing a ransomware payment ban is like banning smoking – you know it’s good for society in the long run, but it is difficult to stop getting a quick fix in the short term. UK organizations should be better prepared than most to enforce a ransomware payment ban due to their lead in cybersecurity and cybersecurity services like insurance products.
The pros of banning ransomware payments are that it removes an incentive for criminal activity and is a morally sound choice. The cons are that, in the short term, this will result in increased data breaches, PII leaks, and the destruction of hardware and software assets when the payment demands are unmet. The reality is that while the UK is a leader in the cyber security industry, many, many organizations lack the resources to defend against these attacks.
One way to offset the risk of ransomware attacks is to counteract the ransomware incentive model with a vulnerability rewards incentive model. Public bug bounty programs incentivize white hat hackers to highlight gaps in your defenses that can be exploited by ransomware gangs. To stop yourself from being hacked, you might need to work with hackers.”
++
Steve Moore, Chief Security Strategist, Co-founder TEN18, Exabeam
“While security professionals have enough information on what ransomware is and how it works at its core, we’ve never solved the foundational problems that make it possible. Despite massive pushes to ‘stop’ ransomware, we fall short. Ransomware is a missed intrusion, period. The attacks are only possible because of a weakness in an endpoint, server, or cloud environment or via compromised credentials that get missed.
Over the last year, generative artificial intelligence (GenAI) has changed the playing field for better and for worse. GenAI is simultaneously a powerful tool and a powerful adversary. GenAI has already changed the threat landscape as both cyberdefenders and cyberattackers leverage GenAI.
Threat actors are deploying sophisticated, AI-driven attack capabilities that are that much harder to detect. Many security experts are searching for the best ways to harness GenAI in defense of sensitive data but not nearly at the same rapid pace.
GenAI can be a new way to bolster detection capabilities, automate behavioral analytics, act as a copilot in incident response, and ultimately be the game changer security professionals need in today’s threat landscape. This Anti-Ransomware Day, it’s important to use the new tools we have today with GenAI because threat actors are already exploiting them to ransom your data.”
##
