UK among countries to sign ransomware payments agreement

2 November 2023, 17:24

Woman’s hands using a laptop keyboard
Technology Stock. Picture: PA

A group of more than 40 countries have signed an agreement pledging not to use central government funds to pay ransoms to cyber criminals.

The UK is among more than 40 countries to have signed a pledge agreeing that central government funds should not be used to pay ransomware demands to cyber criminals.

A joint statement from the Counter Ransomware Initiative (CRI) said the countries “would lead by example” by not paying ransomware demands and “strongly discourage anyone” from doing so.

The UK’s National Cyber Security Centre (NCSC) has always advised businesses and individuals to never pay ransomware demands, and it has been long-standing Government policy to not do so.

The agreement has also been signed by countries including the US, Australia, Canada, France, Germany, Japan and South Korea, as well as Interpol.

Security minister Tom Tugendhat
Security minister Tom Tugendhat hailed the pledge ‘an important step forward’ (PA)

Security minister Tom Tugendhat said the agreement would help set a new “global norm”.

“Crime shouldn’t pay. That’s why the UK and her allies are demonstrating leadership on cybersecurity by pledging not to pay off criminals when they try and extort the taxpayer using ransomware,” he said.

“This pledge is an important step forward in our efforts to disrupt highly organised and sophisticated cyber criminals, and sets a new global norm that will help disrupt their business models and deter them from targeting our country.”

Ransomware is a type of malicious software used by cyber criminals which often encrypts or steals data once it has gained access to a computer system.

The victim is then told to pay a large fee – often in cryptocurrency, which is harder to trace – in order to get their files back.

However, cybersecurity experts, including those at the NCSC, argue that paying a fee only benefits the criminals as it provides an incentive to continue offending and it does not guarantee the release of the affected data – a stance the CRI has now publicly backed in the agreement.

NCSC chief operating officer Felicity Oswald said: “Ransomware poses a significant threat to organisations in the UK and around the world and so international collaboration is essential for bearing down on cyber-criminal operations.

“The joint statement today demonstrates that the UK and a like-minded community of countries do not support payment of online criminals as we know this only makes the threat landscape worse for everyone.

“Many ransomware incidents can be prevented by ensuring that appropriate security measures are in place. We strongly encourage organisations to follow NCSC advice to effectively mitigate the risks and help protect themselves online.”

By Press Association

More Technology News

See more More Technology News

App Stock

Spotify to axe 1,500 jobs to cut costs


David Hockney unveils Christmas display to bring ‘joy and hope’ to Londoners

Internet Browsing Stock

Review set to scrutinise AI’s impact on porn industry

Online Fraud Charter

Top tech firms sign new Government Charter to crack down on online fraud

Microsoft offices

Microsoft to invest £2.5bn in UK to boost AI plans

Musk accused companies like Apple and Disney of engaging in the ad boycott and trying to blackmail him.

Elon Musk launches expletive rant at advertisers who boycotted his social media platform X

Technology stock

Apple names its App Store apps of the year


Generative AI ‘helping criminals create more sophisticated cyber attacks’

Someone using a mobile phone

Virgin Media O2 expands national databank scheme for Christmas

Social media apps on a smartphone

Too much social media linked to harmful behaviours in teenagers, study suggests

Bank accounts

New data powers ‘could allow DWP to snoop on pensioners’ bank accounts’

AI image generators

Teach children about using AI at secondary school, IT professionals say

Child with a laptop

Social media sites failing to stop the spread of suicide content, charity says

Technology Stock

Public warnings about AI misinformation needed before election, peers told

Smartphone with Adobe logo on the screen

£16bn Adobe takeover could harm competition in digital design market – watchdog

Person using a laptop

No ‘smoking gun’ linking mental health harm and the internet – study