The National Cyber Security Centre and the Garda National Cyber Crime Bureau are warning business owners of an increased threat of ransomware, malicious software designed to block access to a computer system until a sum of money is paid.
In a letter to the Small Firms Association, the NCSC and GNCCB noted that they had observed “a trend of small and medium-sized businesses being increasingly targeted by ransomware groups”. In the past these groups typically focused on larger organisations, but “recently there have been several smaller Irish businesses impacted by ransomware”.
NCSC director Dr Richard Browne said: “We have been dealing with the threat of ransomware for some time. However, we have seen a noticeable change in the tactics of criminal ransomware groups, whereby rather than largely focussing on governments, critical infrastructure and big business, they are increasingly targeting smaller businesses.
“This is a trend that has been observed globally, and Ireland is no exception with several businesses becoming victims of these groups in the past number of weeks.”
Browne’s remarks confirm trends noted by cybersecurity companies, as in the Hiscox report just last April. And SFA director Sven Spollen-Behrens confirmed the trend, saying: “This warning from the NCSC and GNCCB tallies with what we are hearing from our membership who are increasingly worried about the threat posed by cybercrime. The advice provided is very helpful and we’re eager to work with the authorities to ensure our membership are putting in place the right protections to defend against these attacks.”
In Association with
The letter to the SFA reiterates measures that SMEs can take to prevent and recover from cyberattacks such as ransomware, referring to several guidance documents published by the NCSC on the topic.
Referring to the advice, Browne added: “Whilst we appreciate that many business owners are understandably nervous of the threat ransomware poses, there are some straightforward security measures that can be put in place to ensure that an organisations data and systems remain secure.”
The authorities reminded businesses that paying a ransom is not advisable. GNCCB head Paul Cleary commented: “We do not encourage, endorse nor condone the payment of ransoms.
“There is no guarantee that paying a ransom will lead to your data being successfully being decrypted or prevent the data from being leaked online. In fact, it may lead to your organisation being targeted again, with some research showing that up to 80% of organisations that pay are attacked again.”
Instead, business owners should report the incidents to both the NCSC and his bureau, who may be able to support victims of cyberattacks. Cleary added that “reporting incidents allows us to fully investigate these cyber-crimes and helps us to identify trends and methods used by attackers so we can provide cyber safety and network protection advice to the public and the corporate sector”.
The National Cyber Security Centre (NCSC) is the technical cyber-security authority in the State responsible for management of major cyber-security incidents. The Garda National Cyber Crime Bureau (GNCCB) is the national Garda unit responsible for the investigation of cyber-dependent crime and forensic examination of all computer media seized during the course of any criminal investigations.
Further details about the National Cyber Security Centre and the Garda National Cyber Crime Bureau, including advice and guidance on ransomware, can be found on their respective websites and via Twitter at @ncsc_gov_ie and @gardainfo.
