Register For Our Mailing List

Register to receive our free weekly newsletter including editorials.

Home / 428

Ransomware threatens home, office and national security

Tobias Vernon of the UK owns two small galleries that sell 20th-century ceramics and artworks. Thanks to marketing efforts, the business has almost 50,000 Instagram followers.

In May 2021, an email appeared from Instagram congratulating the business for getting a ‘blue tick’, which bestows on the account ‘authentic presence’. Vernon clicked the link in the email and logged in. Not long after, a message soon appeared:

“We have seized control of your Instagram account …We require US$1,000 to grant you your account back.”

Even the hackers want to be 'trustworthy'!

Vernon eventually paid US$750 in bitcoin to Russians, who released the account. But get this. Three days later, Vernon got an Instagram message from a bakery in Australia that had been hacked by the same group. The baker had been told to contact Vernon for a Tripadvisor-style testimonial that the hackers were trustworthy, so to speak, in that they would release the kidnapped device when paid.

Such traumas are proliferating because the malware-based crime known as ransomware is reaching menacing proportions. Criminally installed encryption that is reversed only by ransom is rising "almost exponentially” in the words of FBI Director Christopher Wray because the virtual private networks that enable working from home have made business systems more vulnerable.

US cyber-security firm Mimecast found that 61% of the 1,225 global IT firms it surveyed suffered ransomware attacks in 2020, a 20-point jump from 2019. The Australian Cyber Security Centre, a government agency, said ransomware attacks in Australia rose 15% last financial year to 500 incidents. Global security group, Institute for Security and Technology, estimates 2,400 ransomware victims in the US paid nearly US$350 million in ransom in 2020, a 311% jump in payments from 2019.

Ransomware “is an urgent national security risk” because “attacks on the energy grid, on a nuclear plant, waste-treatment facilities … could have devastating consequences,” the Institute cautioned. As such warnings signal, ransomware has evolved from a cottage industry into something resembling a “criminal franchising arrangement”, according to the Australian Cyber Security Centre.

Nothing is safe from virtual kidnappers

Among notable attacks this year, in March, US insurer CNA Financial reportedly paid a then-record US$40 million ransom. In May, ransomware disrupted Colonial Pipeline, which carries 45% of US east coast fuel supplies, for 11 days until a US$$4.3 million ransom was paid for a malfunctioning decrypter key. In July, a ransomware attack on the US-based software company Kaseya was notable for gifting up to 1,500 global victims to the criminals and that the ransom demand was a record US$70 million. The biggest ransomware attack in terms of victims is still the ‘WannaCry’ one in 2017, when up to 300,000 computers were infected though the criminals received limited payment.

Ransomware is flourishing because the risk-reward calculation favours the attackers. What choice do companies have but to pay a government-protected group that might destroy their mission-critical computer system?

Paying the ransom, however, often fails as a solution. The Mimecast survey found that 52% of ransomware victims paid the ransom but only 66% of those recovered their data – the others were double-crossed.

The hope is that the risk part of the calculation might increase to the detriment of the scammers because western governments are enhancing and coordinating efforts to stop ransom attacks. Officials too are warning internet users to be better prepared for these attacks.

Eradicating the threat seems far off. Computer systems are impossible to secure and it’s expensive to try. Phishing emails and other scams too easily trick people into installing malware. Enough employees are willing to sell passwords on the ‘dark web’. Perhaps, though, the greatest asset ransomware criminals have is that cryptocurrencies are hard to trace. Many advise that a government crackdown on cryptos is the best way to reduce the menace.

The US’s unprecedented move in September to blacklist a Russian-owned crypto exchange shows Washington might agree. Something needs to tackle this mobster shakeout for using the web before the damage reaches national-security proportions.

Even if defensive efforts increase, ransomware appears unbeatable when five billion people are connected to the internet. As ransomware is online, the public seems to be unable to come to terms with the magnitude of the threat, which hampers the fightback. It’s true that ransomware would exist even if cryptos didn’t but it might barely register as a danger because how would the criminal be paid?

Some victims refuse to pay and the criminals back down. The ‘WannaCry’ attack emanating from North Korea generated little ransom for the attackers but according to the world’s anti-laundering body caused an estimated US$8 billion in damages to hospitals, banks and businesses across the world.

Attack the problem at the payment end

Such calculations show that the ransomware threat needs to be taken much more seriously. The non-virtual world provides the clue to defeating the menace. Kidnapping is a rare crime nowadays because the police caught kidnappers when they spent the cash. The solution to ransomware might be to regulate cryptocurrencies, possibly – as is the intention of China’s ban on crypto activities – to the point where they are unviable.

Such actions might mean the world loses the (disputed) benefits of cryptocurrencies. But that’s part of the cost-benefit analysis governments need to undertake to defeat the scammers that hound legitimate users of the internet, be they UK gallery owners or bakers in Australia.

 

Michael Collins is an Investment Specialist at Magellan Asset Management, a sponsor of Firstlinks. This article is for general information purposes only, not investment advice. For the full version of this article and to view sources, go to: https://www.magellangroup.com.au/insights/.

For more articles and papers from Magellan, please click here.

 

RELATED ARTICLES

Fight cybercrime by investing in cybersecurity

Cybercrime response may slow internet

banner

Most viewed in recent weeks

Finding the best income-yielding assets

With fixed term deposit rates declining and bank hybrids being phased out, what are the best options for investors seeking income? This goes through the choices, and the opportunities and risks involved.

What history reveals about market corrections and crashes

The S&P 500's recent correction raises concerns about a bear market. History shows corrections are driven by high rates, unemployment, or global shocks, and that there's reason for optimism for nervous investors today. 

Howard Marks: the investing game has changed

The famed investor says the rapid switch from globalisation to trade wars is the biggest upheaval in the investing environment since World War Two. And a new world requires a different investment approach.

Welcome to Firstlinks Edition 605 with weekend update

Trump's tariffs and China's retaliatory strike have sent the Nasdaq into a bear market with the S&P 500 not far behind. What are the implications for the economy and markets, and what should investors do now? 

  • 3 April 2025

Designing a life, with money to spare

Are you living your life by default or by design? It strikes me that many people are doing the former and living according to others’ expectations of them, leading to poor choices including with their finances.

World's largest asset manager wants to revolutionise your portfolio

Larry Fink is one of the smartest people in the finance industry. In his latest shareholder letter, the Blackrock CEO outlines his quest to become the biggest player in private assets and upend investor portfolios.

Latest Updates

Investment strategies

An enlightened dividend path

While many chase high yields, true investment power lies in companies that steadily grow dividends. This strategy, rooted in patience and discipline, quietly compounds wealth and anchors investors through market turbulence.

Investment strategies

Don't let Trump derail your wealth creation plans

If you want to build wealth over the long-term, trying to guess the stock market's next move is generally a bad idea. In a month where this might be more tempting than ever, here is what you should focus on instead.

Economics

Pros and cons of Labor's home batteries scheme

Labor has announced a $2.3 billion Cheaper Home Batteries Program, aimed at slashing the cost of home batteries. The goal is to turbocharge battery uptake, though practical difficulties may prevent that happening.

Investment strategies

Will China's EV boom end in tears?

China's EV dominance is reshaping global auto markets - but with soaring tariffs, overcapacity, and rising scrutiny, the industry’s meteoric rise may face a turbulent road ahead. Can China maintain its lead - or will it stall?

Investment strategies

REITs: a haven in a Trumpian world?

Equity markets have been lashed by Trump's tariff policies, yet REITs have outperformed. Not only are they largely unaffected by tariffs, but they offer a unique combination of growth, sound fundamentals, and value.

Shares

Why Europe is back on the global investor map

European equities are surging ahead of the U.S this year, driven by strong earnings, undervaluation, and fiscal stimulus. With quality founder-led firms and a strengthening Euro, Europe may be the next global investment hotspot.

Chalmers' disingenuous budget claims

The Treasurer often touts a $207 billion improvement in Australia's financial position. A deeper look at the numbers reveals something less impressive, caused far more by commodity price surprises than policy.

Fixed interest

Duration: Friend or foe in a defensive allocation?

Duration is back. After years in the doghouse, shifting markets and higher yields are restoring its role as a reliable diversifier and income source - offering defensive strength in today’s uncertain environment.

Sponsors

Alliances

© 2025 Morningstar, Inc. All rights reserved.

Disclaimer
The data, research and opinions provided here are for information purposes; are not an offer to buy or sell a security; and are not warranted to be correct, complete or accurate. Morningstar, its affiliates, and third-party content providers are not responsible for any investment decisions, damages or losses resulting from, or related to, the data and analyses or their use. To the extent any content is general advice, it has been prepared for clients of Morningstar Australasia Pty Ltd (ABN: 95 090 665 544, AFSL: 240892), without reference to your financial objectives, situation or needs. For more information refer to our Financial Services Guide. You should consider the advice in light of these matters and if applicable, the relevant Product Disclosure Statement before making any decision to invest. Past performance does not necessarily indicate a financial product’s future performance. To obtain advice tailored to your situation, contact a professional financial adviser. Articles are current as at date of publication.
This website contains information and opinions provided by third parties. Inclusion of this information does not necessarily represent Morningstar’s positions, strategies or opinions and should not be considered an endorsement by Morningstar.