Average Ransom Payment Surged 171% in 2020

Average Ransom Payment Surged 171% in 2020

The average ransomware payment soared by 171% year-on-year in 2020 as cybercrime gangs queued up to exploit the pandemic, according to a new report from Palo Alto Networks.

The security vendor’s Unit 42 division compiled its Ransomware Threat Report 2021 from analysis of over 19,000 network sessions, 252 ransomware leak sites and 337 victim organizations.

It revealed the average ransom paid rose from $115,123 in 2019 to $312,493 in 2020, while the largest payment doubled from $5m to $10m. It also claimed that cybercrime gangs are getting greedier, with the largest demand doubling over the same time period to $30m.

Maze was notable in demanding an average of $4.8m in 2020, much higher than the average of $847,344 across all ransomware families last year.

However, the ransom payment itself is just one portion of the total losses victim organizations might suffer. Palo Alto Networks claimed the average cost of a forensic engagement was $73,851 last year but in some sectors incident response costs rocketed. The tech sector saw a 65% increase year-on-year, for example.

Even when backups are a viable option for victims, these costs “would incapacitate many businesses,” the report warned.

In fact, victims who decided not to pay up last year, such as Universal Health Services (UHS), Sopra Steria and Cognizant, all revealed massive losses exceeding $60m as a result of operational outages, lost custom and other factors.

Like others, Unit 42 explained that ransomware groups adapted their tactics last year to target remote workers and certain sectors like healthcare likely to have been hard hit by the pandemic.

It also claimed that the NetWalker group, since disrupted by law enforcement action early this year, was responsible for a third (33%) of double-extortion data leaks.

Unsurprisingly, the US accounted for the majority of victims last year, followed by Canada, Germany and the UK.

Premium Domain Names – transcom.uk
Transcom ISP – The UK’s Best Business ISP
DoubleCheck any website at doublecheck.uk

Exploiting Spectre Over the Internet

Google has demonstrated exploiting the Spectre CPU attack remotely over the web:

Today, we’re sharing proof-of-concept (PoC) code that confirms the practicality of Spectre exploits against JavaScript engines. We use Google Chrome to demonstrate our attack, but these issues are not specific to Chrome, and we expect that other modern browsers are similarly vulnerable to this exploitation vector. We have developed an interactive demonstration of the attack available at https://leaky.page/ ; the code and a more detailed writeup are published on Github here.

The demonstration website can leak data at a speed of 1kB/s when running on Chrome 88 on an Intel Skylake CPU. Note that the code will likely require minor modifications to apply to other CPUs or browser versions; however, in our tests the attack was successful on several other processors, including the Apple M1 ARM CPU, without any major changes.

Premium Domain Names – transcom.uk
Transcom ISP – The UK’s Best Business ISP
DoubleCheck any website at doublecheck.uk

CompTIA Launches Training Catalogue to Promote “Outstanding” IT Apprenticeships

CompTIA Launches Training Catalogue to Promote “Outstanding” IT Apprenticeships

IT industry association CompTIA has launched a new training catalogue designed to facilitate the development of outstanding IT apprenticeships.

The CompTIA Apprenticeship Training Solutions Catalogue will make it easier for training providers and their staff to understand how CompTIA learning objectives map to the UK’s digital apprenticeship standards. Linking directly to mapping documents, learning objectives and other materials, the resource ensures each relevant tech standard is aligned with the associated apprenticeship standards.

The catalogue places a particular emphasis on eLearning content, responding to increased demand from employers and apprentices for greater flexibility in how they access learning. This includes a solution which provides candidates with access to CompTIA CertMaster Learn, a comprehensive eLearning suite. Other learning materials include eBooks, labs and practice questions.

Graham Hunter, VP skills certifications, CompTIA, commented: “Now more than ever employers and apprentices alike are looking for greater flexibility in how and where they can access learning. At the same time any resulting investment needs to bring value. Understanding how learning content and the associated apprenticeship modules align is complex and we hope that the Apprentice Solutions Catalogue can help shed some light on the wide range of engaging and rich learning materials available whether candidates are working remotely or in the office.”

Discussing the catalogue, end point assessor John Pritchard, Accelerate People, said: “Over many years of overseeing end point assessments, we can attest to the marked boost in professional skills that certifications provide. By demonstrating the close links between CompTIA learning objectives and Apprenticeship Standards Outcomes, this catalogue will help providers fast-track delivery of the knowledge required within the identified apprenticeships. The transferable skills gained by aligning learning to the objectives of vendor qualifications will also crucially lower the barrier to entry for those looking to self-certify, opening up a number of opportunities later on in their careers, setting them up for life-long learning and growth.”

Premium Domain Names – transcom.uk
Transcom ISP – The UK’s Best Business ISP
DoubleCheck any website at doublecheck.uk

Infrastructure Security Specialist Optilan Appoints Adrian Bannister as CFO

Infrastructure Security Specialist Optilan Appoints Adrian Bannister as CFO

Security and communications integrator for businesses, industries and governments Optilan has announced the appointment of Adrian Bannister as its new chief financial officer (CFO).

Bannister brings over 25 years of financial experience to the firm, which specializes in solutions for energy, critical national infrastructure, pipeline and rail projects.

He most recently held the position of CFO at specialist energy technology business Ardyne, along with various strategic executive roles across at a variety of oilfield services businesses. Banister also operated in a non-executive position at pipeline business Cortez Subsea for six years.

At Optilan, Bannister will focus on the organization’s strategic financial planning, ensuring its recent growth continues and the company progresses with its rapid international expansion targets.

Commenting on his appointment, Bannister said: “I am very proud to join Optilan as CFO. Optilan boasts an impressive history of staying at the very forefront of technology to deliver security-critical and safety-critical systems across nationally and internationally-critical projects.

“I am particularly excited about the company’s growth plans, helping clients use the very latest technology to drive efficiency and optimize their systems in a cost-effective way.”

Optilan CEO Bill Bayliss acknowledged Bannister’s “invaluable experience” in private equity and helping tech-focused industrial businesses achieve, manage and sustain long-term growth.

“Adrian knows the energy sector like the back of his hand and has helped PE-backed, high-growth companies just like us navigate the industry. He’s therefore perfectly positioned to lead the company as we evolve our offering across a variety of nationally and internationally critical industries.”

Premium Domain Names – transcom.uk
Transcom ISP – The UK’s Best Business ISP
DoubleCheck any website at doublecheck.uk