Security News > 2022 > February > UK, US, Australia issue joint advisory: Ransomware on the loose, critical national infrastructure affected

Ransomware attacks are proliferating as criminals turn to gangs providing turnkey post-compromise services, Britain's National Cyber Security Centre has warned.
The warning comes hot on the heels of several high-profile attacks against oil distribution companies and also businesses that operate ports in the West - though today's note insists there was a move by criminals away from "Big game hunting" against US targets.
The NCSC told The Register today's warning was not linked to a potential Russian invasion of Ukraine, with the advisory adding that the shift away from the US by criminals hasn't really affected Britain: organisations of all sizes are still in the firing line - even those making the nation's favourite snacks.
Common routes into an organisation's IT infrastructure for a ransomware attack range from compromise of cloud applications and storage, to supply chain attacks such as those directed against upstream MSPs, and the age-old tactic of attacking on a weekend or holiday.
Many ransomware gangs are believed to be based in Russia and the country has a storied history of state-directed cyber attacks against the West.
According to ESET's latest Threat Report, out today, ransomware attacks "Surpassed the worst expectations of 2021" and in the first half of the year alone companies across the globe collectively paid out some $5bn in bitcon to make the bad things stop.
News URL
https://go.theregister.com/feed/www.theregister.com/2022/02/09/uk_us_au_ransomware_warning/
Related news
- US charges operators of cryptomixers linked to ransomware gangs (source)
- UK floats ransomware payout ban for public sector (source)
- UK Considers Banning Ransomware Payments (source)
- Medusa ransomware group claims attack on UK's Gateshead Council (source)
- Trump admin's purge of US cyber advisory boards was 'foolish,' says ex-Navy admiral (source)
- All your 8Base are belong to us: Ransomware crew busted in global sting (source)
- US sanctions LockBit ransomware’s bulletproof hosting provider (source)
- US indicts 8Base ransomware operators for Phobos encryption attacks (source)
- UK, US, Oz blast holes in LockBit's bulletproof hosting provider Zservers (source)
- US lawmakers press Trump admin to oppose UK's order for Apple iCloud backdoor (source)