Ransomware: Ransomware is the biggest cyber threat to the UK today.
Since 2019, the NCSC has observed a
steady growth in ransomware incidents, affecting UK organisations of all sizes. This infographic re-iterates the ongoing threat from ransomware, and reminds business leaders that applying What you need to know NCSC guidance can drive greater cyber resilience against these types of attack.
What is ransomware, What should business
and how does it work? leaders be doing? Ransomware is malicious software Business leaders don’t ('malware') that prevents you from need to be cyber accessing your computer, or the data security experts, but stored on it. knowing the basics of During a ransomware attack, your data is how ransomware works will mean they normally encrypted (so that you can’t use it) can have constructive conversations with or it may be stolen. The attackers may even their technical experts about the threat. threaten to publish your sensitive data online. Make sure ransomware is high on What is the threat Attackers usually send a ransom note your board’s agenda. Cyber security demanding payment to recover encrypted from ransomware? data, often using an anonymous email is a board-level responsibility, and business leaders should be asking address. They will typically request payment specifically about ransomware. Ransomware attacks can be massively in the form of a cryptocurrency. disruptive to organisations, with victims requiring a significant amount of time Ensure that the NCSC’s guidance on Most ransomware is ‘enterprise-wide’, ransomware is being implemented (and money) to recover critical services and deliver against customer demand. meaning it’s not just one user or one device within your organisations. The that is affected, but the whole network. guidance (listed below left) includes They . may also generate high-profile public and media interest, especially if practical steps that organisations of all sensitive data stolen during the attack sizes can take to increase their is published. This can expose your resilience against ransomware attacks. organisation to long-term reputational damage. . Where to get more help Register for the NCSC’s free Early Ransomware attacks are becoming The following NCSC advice and guidance contains Warning Service, which can warn both more frequent and more the most up-to-date ransomware mitigations: you if vulnerable services or early sophisticated. The NCSC believes signs of cyber attacks (including that . ransomware will remain a major • Mitigating malware and ransomware ransomware) have been detected threat to the UK for the next one to two attacks: guidance for system owners on how to on your network. years. defend against malware and ransomware attacks • The rise of ransomware blog: a more detailed look Ransomware is a board-level at how ransomware threats are evolving responsibility. All business leaders should ensure it’s on their risk • Ransomware - what board members should know: agenda. a blog explaining the basics of ransomware for non-technical audiences (includes key ransomware questions that board members should ask their cyber security staff)