Ransomware is the most profitable cybercrime

Cisco report finds that encrypting victim’s data makes a lot of money

Ransomware has fast become the dominant form of malware as it makes the most profit for gangs, according to new research.

Cisco's 2016 Midyear Cybersecurity Report found that fragile infrastructure, poor network hygiene, and slow detection rates are the main reasons this type of malicious attack is effective.

The networking firm said it expects the upward trend in ransomware to continue with even more destructive variants that can spread by themselves and hold entire networks and companies hostage appearing.

It said new modular strains of ransomware will be able to quickly switch tactics to maximise efficiency and future ransomware attacks will evade detection by being able to limit CPU usage and refrain from command-and-control actions.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

The report also found a growing number of ransomware attacks using server vulnerabilities specifically within JBoss servers of which, 10 per cent of those connected to the internet worldwide were found to be compromised. Many of the JBoss vulnerabilities used to compromise these systems were identified five years ago, meaning that basic patching and vendor updates could have easily prevented such attacks, according to Cisco.

Cyber criminals are also getting better at keeping a low profile when carrying out ransomware attacks, with an increased use of cryptocurrency, Transport Layer Security and Tor, which enables anonymous communication across the web.

The report said  many companies do a lousy job of keeping software up to date as a means of defending against ransomware attacks. It reported that 20-25 per cent of Chrome users were on the latest version of the browser, and Java sees slow migrations with one-third of the systems examined running Java SE 6, which is being phased out by Oracle (the current version is SE 10).

In Microsoft Office 2013, 10 per cent or less of users are using the newest service pack version.

"As organisations capitalise on new business models presented by digital transformation, security is the critical foundation. Attackers are going undetected and expanding their time to operate. To close the attackers' windows of opportunity, customers will require more visibility into their networks and must improve activities, like patching and retiring ageing infrastructure lacking in advanced security capabilities," said Marty Roesch, vice president and chief architect of the Security Business Group at Cisco.

Featured Resources

How inkjet can transform your business

Get more out of your business by investing in the right printing technology

Download now

Journey to a modern workplace with Office 365: which tools and when?

A guide to how Office 365 builds a modern workplace

Download now

Modernise and transform your sales organisation

Learn how a modernised sales process can drive your business

Download now

Your guide to managing cloud transformation risk

Realise the benefits. Mitigate the risks

Download now
Advertisement

Recommended

Visit/security/29204/how-can-you-protect-your-business-from-crypto-ransomware
Security

How can you protect your business from crypto-ransomware?

4 Nov 2019
Visit/business-strategy/collaboration/354660/cisco-webex-will-use-voice-tools-to-exploit-next-frontier-of
collaboration

Cisco WebEx will use voice tools to exploit ‘next frontier’ of data insights

29 Jan 2020
Visit/infrastructure/network-internet/354629/what-to-expect-from-cisco-live-2020
Network & Internet

What to expect from Cisco Live 2020

24 Jan 2020
Visit/security/internet-security/354417/avast-and-avg-extensions-pulled-from-chrome
internet security

Avast and AVG extensions pulled from Chrome

19 Dec 2019

Most Popular

Visit/mobile/28299/how-to-use-chromecast-without-wi-fi
Mobile

How to use Chromecast without Wi-Fi

5 Feb 2020
Visit/operating-systems/microsoft-windows/354789/microsoft-pulls-disastrous-windows-10-security-update
Microsoft Windows

Microsoft pulls disastrous Windows 10 security update

17 Feb 2020
Visit/operating-systems/27717/how-to-fix-a-stuck-windows-10-update
operating systems

How to fix a stuck Windows 10 update

12 Feb 2020
Visit/cloud/cloud-computing/354767/google-cloud-snaps-up-multi-cloud-analytics-platform-for-26bn
cloud computing

Google Cloud snaps up multi-cloud analytics platform for $2.6bn

13 Feb 2020