Cyber threat analysts have stated that 50% to 70% of all ransomware attacks in the U.S. are targeting small and medium-sized businesses, costing the victims an estimated total of $350 million in the last year, Secretary of Homeland Security Alejandro Mayorkas said Wednesday in a speech to the U.S. Chamber of Commerce. "The losses from ransomware are staggering. And the pace at which those losses are being realized is equally staggering," Mayorkas said, noting this is why DHS has made battling ransomware a priority.
DHS, through the U.S. Cybersecurity and Infrastructure Security Agency and the Secret Service, offers tools and educational programs that small businesses can access to help them better defend themselves from ransomware attacks - and more resources are on the way, Mayorkas said. "We in the Department of Homeland Security are uniquely situated to assist you and to partner with you in battling ransomware and the threat it poses," Mayorkas said. He pointed out that in the past year, ransomware attacks against smaller businesses have increased 300%.
In March 2021, Mayorkas announced that DHS would conduct a 60-day "sprint" exercise focused on battling ransomware. Then in April 2021, the Justice Department created the Ransomware and Digital Extortion Task Force, which will include DOJ officials and representatives from the FBI and the Executive Office for United States Attorneys.
"We developed a series of sprints in the cybersecurity arena, and ransomware is the first sprint because of two important criteria: Number one, the gravity of the threat. And number two, the threat is not tomorrow's threat, but it is upon us," Mayorkas said in his Wednesday presentation.
Because small businesses are the backbone of the U.S. economy, they are a prime target for ransomware gangs, the DHS secretary noted. He told the Chamber of Commerce audience: "We stand at the ready to provide education, to provide vital information to assist you in navigating through what you perceive to be a threat, to assist you in perhaps building the defenses."
Mayorkas stressed: "It is important that every small business understands that this should be a priority. The term 'existential' was used in describing the threat, and it very well can be an existential threat to one's business."
With many organizations in sectors typically favored by ransomware operators (for example, healthcare, local government or education) vastly increasing their use of and reliance on remote IT services, victims may be more inclined to pay to restore services than under 'normal' conditions.
Jim McKee, CEO of Red Sky Alliance stated in a recent panel discussion that it is the responsibility of all business owners to train and protect their organizations against ransomware attacks. “No government can protect you from these attacks, all employees need cyber threat training that includes periodic phishing tests. Phishing is the primary delivery method for placing malware.”
Red Sky Alliance strongly recommends ongoing monitoring from both internal and external perspectives. Internal monitoring is common practice and very important, however, external threats are often overlooked and can represent an early warning of impending attacks. Red Sky Alliance can provide both internal monitoring in tandem with RedXray notifications on external threats to include, botnet activity, public data breaches, phishing, fraud, and general targeting.
Red Sky Alliance is in New Boston, NH USA. We are a Cyber Threat Analysis and Intelligence Service organization. For questions, comments, or assistance, please contact the lab directly at 1-844-492-7225, or feedback@wapacklabs.com.
Interested in a RedXray subscription to see what we can do for you? Sign up here: https://www.wapacklabs.com/RedXray
- Reporting: https://www.redskyalliance.org/
- Website: https://www.wapacklabs.com/
- LinkedIn: https://www.linkedin.com/company/64265941
Comments