BSSN Records Nearly 1 Million Ramsomware Attacks In The Financial Sector

Hacker illustration (photo: dock. Pexel)

JAKARTA - The National Cyber and Crypto Agency (BSSN) highlighted cyber crime which has recently attacked the financial sector. Throughout 2023, 160 million traffic anomalies have been recorded and 966,533 are indicated to be ramsomware.

"Of the 160 million anomalies, and as many as 966,533 or almost one million indicated malware ransomware," said Director of Cybersecurity and Crypto of Finance, Trade and Tourism, Deputy IV of BSSN, Edit Prima at The Finance Executive Forum at Kempinski Hotel, Tuesday, November 14.

Prima said that cyber attacks related to ramsoware came from various malware that were included in the top 10 ramsomware ranks, including Luna Moth, WannaCry, Locky, LockBit, Darkside, Ryuk, Troldesh, Grandcrab, STOP, Aaurora.

Based on data from SmallBiz Trends (2023), 1 of the 4 companies affected by ransomware went bankrupt and 2 of the 4 companies lost their reputation.

"So of course this is our common homework that the ransomare is a significant threat," he explained.

Due to this condition, Prima said that there were various learnings of cyber attacks in the Ramsomware case in Indonesia regarding People, Process and Technology, namely from the people side, namely in an effort to increase security awareness for all organizations related to the use of information technology.

"Be aware of Email as an initial access or an entrance to the means of distributing Ransomware, especially emails with attachment executables," he said.

Furthermore, in terms of process, namely improving cyber security level governance and also ensuring updating antiviral device updates and updating other security perimeters.

In addition, Prima conveyed the need to increase the patch management policy, implement the least-privilege policy, limit program execution from temporary folders, apply data/systrem backup and recovery not to be left behind, from a technology perspective, namely increasing web filtering capabilities.

According to Prima, the most important thing is not to make negligence in using an email account and just click without paying attention to clear information.

"Not only emails, but also a lot on whatapps and other media," he concluded.