Ransomware in 2025!
The Looming Threat: How Big Will Ransomware Be in the UK in 2025?
Although only 27 days into the New Year I have already sat on some real key webinars from our Partners as we look at 2025 cyber predictions.
One thing that stood out to me was, regardless of vendor or technology, Ransomware is still very much high on the threat list. Let’s be honest, Ransomware has been around now for a while, it first hit the scene around early 2000’s with relatively unsophisticated attacks using basic encryption and targeted individuals.
By around 2012 Cryptolocker arrived and was one of the first ransomware strains to gain widespread notoriety. Enter Bitcoin demands, a new tactic at the time.
2017 we saw WannaCry and if we fast forward to today, we are at a point where Ransomware is an increasingly complex threat and still growing.
Why the UK is in the Crosshairs
What is driving the increase in a threat that we have seen for over 20 years?
Sophisticated Attack Methods
Ransomware-as-a-Service (RaaS) allows even non-technical criminals to launch attacks, lowering the barrier to entry for cybercrime.
Increased Targeting of SMEs
Small and medium-sized businesses often lack the resources to defend against sophisticated attacks, making them low-hanging fruit.
It is very lucrative
Ransomware is highly profitable with some businesses willing to pay substantial ransoms to regain access to critical systems and prevent data leaks.
The rise of Digital Dependence
Since COVID many business have literally had to change how they work. This has huge benefits but hackers are not one to miss an opportunity. As we move to an increasing digital environment, this can increase our attack surface. Cloud adoption, remote workers, increasing online tools = more endpoints, a widespread workforce and a detailed strategy to cope with access which is now not locked down to just main offices.
Advanced Techniques
Not to bang on about the bad offsetting the good but new tools for us, means new tools for them. Welcome AI to the party.
Skills and budgets
Cyber protection is frankly not an exhaustive list, I would go as far to say that the majority of businesses would increase at least one area if they could. That could be technology, training, insurance or staff. But in the real world many IT Teams are restrained by budgets and skill shortages. The real answer is ensuring you maximise what you have to play with to ensure whatever your strategy looks like, it provides the absolute maximum defence it can.
Supply chain Vulnerabilities
We do see more and more discussions around “supply chains” as it can often get overlooked so its refreshing to see these talks increasing. If your supplier has a weak defence this could provide a weaker link in the chain to exploit.
Now, the above is not a complete list, but it does highlight why Ransomware is still hitting the “top risk list” and something that will still be heavily discussed in 2025.
What Can You Do Now?
The good news is there are some more basic steps that can be taken now which will help
- Conduct a thorough risk assessment: Identify your vulnerabilities before the attackers do.
- Implement multi-factor authentication: A simple yet effective way to add an extra layer of security.
- Regularly update and patch systems: Don’t give attackers easy access through known vulnerabilities.
- Create and test a robust backup strategy: Ensure you can recover quickly if the worst happens.
- Develop an incident response plan: Be prepared to act swiftly in the event of an attack.
And, in my option, one of the absolute key steps…. Drum roll!
Train your staff. Honestly, if you don’t already or you have low engagement with your current solution take some time to focus on this.
Hackers are using the human error as the door in and this will only increase. It gets coined so much but your staff can be the best firewall you can invest in (read our blog on user awareness training).
As with many things I like to get our CTO’s (Mark Lambourne) thoughts on these things and here is what he had to say on the subject:
“Remember ransomware is not a specific virus, it’s an attackers technique or objective. In many cases it is the last step in a wider orchestrated attack sometimes by different groups in the criminal underground, those who share compromised access, and those who look to monetise the attack through extortion or ransomware. Modern attacks don’t even use malware, utilising built in Microsoft encryption tools.
As ransomware attacks are complicated they cannot be suitably protected by a singular tool like Anti-malware, it takes a layered approach, involving good cyber hygiene (config and patching), enhanced visibility (EDR, XDR, SIEM, MDR) and of course a great security culture, where staff feel empowered to spot and report potential incidents, not fear punishment for making mistakes.”
So as we get close to waving our first month of 2025 goodbye expect Ransomware to remain on the agenda. But we are experts on this chat, right!
Remember, we are all facing the same threats and are in this together, but if you do feel overwhelmed by Ransomware, the 2025 threats or want to discuss anything cyber related we are always here.