UK among countries to sign ransomware payments agreement

2 November 2023, 17:24

Woman’s hands using a laptop keyboard
Technology Stock. Picture: PA

A group of more than 40 countries have signed an agreement pledging not to use central government funds to pay ransoms to cyber criminals.

The UK is among more than 40 countries to have signed a pledge agreeing that central government funds should not be used to pay ransomware demands to cyber criminals.

A joint statement from the Counter Ransomware Initiative (CRI) said the countries “would lead by example” by not paying ransomware demands and “strongly discourage anyone” from doing so.

The UK’s National Cyber Security Centre (NCSC) has always advised businesses and individuals to never pay ransomware demands, and it has been long-standing Government policy to not do so.

The agreement has also been signed by countries including the US, Australia, Canada, France, Germany, Japan and South Korea, as well as Interpol.

Security minister Tom Tugendhat
Security minister Tom Tugendhat hailed the pledge ‘an important step forward’ (PA)

Security minister Tom Tugendhat said the agreement would help set a new “global norm”.

“Crime shouldn’t pay. That’s why the UK and her allies are demonstrating leadership on cybersecurity by pledging not to pay off criminals when they try and extort the taxpayer using ransomware,” he said.

“This pledge is an important step forward in our efforts to disrupt highly organised and sophisticated cyber criminals, and sets a new global norm that will help disrupt their business models and deter them from targeting our country.”

Ransomware is a type of malicious software used by cyber criminals which often encrypts or steals data once it has gained access to a computer system.

The victim is then told to pay a large fee – often in cryptocurrency, which is harder to trace – in order to get their files back.

However, cybersecurity experts, including those at the NCSC, argue that paying a fee only benefits the criminals as it provides an incentive to continue offending and it does not guarantee the release of the affected data – a stance the CRI has now publicly backed in the agreement.

NCSC chief operating officer Felicity Oswald said: “Ransomware poses a significant threat to organisations in the UK and around the world and so international collaboration is essential for bearing down on cyber-criminal operations.

“The joint statement today demonstrates that the UK and a like-minded community of countries do not support payment of online criminals as we know this only makes the threat landscape worse for everyone.

“Many ransomware incidents can be prevented by ensuring that appropriate security measures are in place. We strongly encourage organisations to follow NCSC advice to effectively mitigate the risks and help protect themselves online.”

By Press Association

More Technology News

See more More Technology News

Thousands of flights were cancelled across the globe on Friday.

Travel misery continues as global IT outage 'could take weeks to clear' - with over 5,000 flights cancelled worldwide

Thousands of flights were cancelled across the globe on Friday.

Boss of company behind global IT outage 'sincerely apologises' for worldwide chaos sparked by software bug

Thousands of flights were cancelled across the globe on Friday.

Misery for holidaymakers as 4,000 flights grounded by IT outage that sparked chaos, and recovery 'could cost billions'

Over 4,000 flights have been delayed or cancelled today.

Has your flight been affected by the global IT outage? Can you claim compensation?

Thousands of flights where cancelled across the globe on Friday.

Worldwide IT outage could last 'days' as flights grounded, shops closed and operations cancelled

Passengers are facing delays across the country

Is your flight delayed? Airports and airlines issue updates after mass IT outage causes travel chaos around the world

The outage is being felt across the world

Global IT outage LIVE: CrowdStrike outage could be ‘biggest cyber incident in history’ as GP surgeries and banks hit

A Microsoft bug has caused a huge IT update

Mass IT outage grounds planes and hits trains, banks and businesses across the world

The Strategic Defence Review must maintain a cyber focus.

The Strategic Defence Review must maintain a cyber focus

Close up hand holding mobile phone Nokia 3310 isolated on pink background. Female hand holding old used phone Nokia 3310.

Eton pupils given ‘brick’ phones instead of smartphones under new policy

Cyber attack at major London hospitals

Hundreds of operations and appointments cancelled in week after NHS cyber attack

Labour said it would also ban the creation of sexually explicit deepfakes (PA)

Labour commits to introducing AI regulation for tech giants

Daniel Bedingfield

Pop star Daniel Bedingfield praises AI for capturing ‘soul’ of his music

Elon Musk, CEO of Tesla and SpaceX (PA)

Elon Musk says Tesla shareholders will vote to approve pay deal

Person wearing an Apple watch on their left wrist

Smart watches could help track Parkinson’s disease progression – study

A person's forefinger poised on the keyboard of a laptop computer

Gaming giant Steam facing £656m legal claim for ‘overcharging’ UK gamers