２０２１年上半期のランサムウエア被害額６７０億円に、米財務省が報告書

【ワシントンＡＦＰ＝時事】米財務省は１５日、金融犯罪に関する報告書を発表し、米当局に報告されたランサムウエア（身代金要求型ウイルス）関連の支払いが２０２１年上半期だけで５億９０００万ドル（約６７０億円）に上ったことを明らかにした。年間としては過去１０年の被害総額を上回るペースだという。（写真は資料写真）
　報告書によると、上半期の被害額は金融機関が公表した２０２０年の被害総額の４２％増。また、実際の被害額は数十億ドルに上る可能性が高いという。
　財務省傘下の機関「金融犯罪取り締まりネットワーク」は、現在の傾向が続けば２０２１年全体では過去１０年の被害総額を上回るとしている。
　ランサムウエアを使ったサイバー攻撃は、企業や組織のネットワークに侵入してデータを暗号化し、一般的には暗号を解除するデジタルキーと引き換えに暗号資産（仮想通貨）で身代金を払うよう要求する。
　米政府は、急増するサイバー攻撃の取り締まりを強化しており、暗号資産から現金への不正な交換が行われたとみられるオンライン取引所に初めて制裁を科すなどの措置を取っている。
　最近では米国最大の石油パイプラインや世界的な食肉加工大手、電子メールサーバー「マイクロソフトエクスチェンジサーバー」がサイバー攻撃を受けており、巨額の身代金を要求するハッカーに対する米国のインフラの脆弱（ぜいじゃく）性が指摘されている。【翻訳編集ＡＦＰＢＢＮｅｗｓ】

〔ＡＦＰ＝時事〕（2021/10/18-13:26）

New data out Friday showed $590 million in ransomware-related payments were reported to US authorities in the first half of 2021 alone, setting a pace to beat totals for the whole previous decade as cyber-extortion booms.
The figure is also 42 percent higher than the amount divulged by financial institutions for all of 2020, the US Treasury report said, and there are strong indicators the true cost could be in the billions.
If current trends continue, (reports) filed in 2021 are projected to have a higher ransomware-related transaction value than... filed in the previous 10 years combined, said Treasury's Financial Crimes Enforcement Network.
The heists involve breaking into a company or institution's network to encrypt its data, then demanding a ransom, typically paid via cryptocurrency in exchange for the digital key to unlock it.
Washington has sought to crack down on a sharp rise in attacks, including issuing its first sanctions against an online exchange where illicit operators have allegedly swapped cryptocurrency for cash.
Recent assaults on a major US oil pipeline, a meatpacking company and the Microsoft Exchange email system drew attention to the vulnerability of US infrastructure to digital pirates who are extorting staggering sums.
Treasury said investigators found over 150 online wallets for cyptocurrency and by analyzing them uncovered roughly $5.2 billion in transactions potentially tied to ransomware payments.
Companies and institutions face intense pressure to pay up in order to get their data unlocked, but also to keep the attack from potentially angry clients and authorities who issue stern warnings not to give cash to criminals.
- Threat to critical infrastructure -
The report, based on the suspicious activity alerts that financial firms have to file, noted it was unclear if the jump represented increased awareness of the cybercrime.
This trend potentially reflects the increasing overall prevalence of ransomware-related incidents as well as improved detection and reporting, Treasury said.
The victims of the attacks were not identified in the report, which noted some of the apparent ransoms were paid before January 2021.
The new data on the scale of payments related to hacks came after more than two dozen nations resolved to collectively fight ransomware during a Washington-led summit.
The United States gathered the countries -- with the notable exception of Russia -- to unify and boost efforts to fight a cybercrime that is transnational, on the rise and potentially devastating.
Stronger digital security and offline backups as well as collectively targeting the laundering of the attacks' proceeds were identified as crucial steps in the fight.
We will consider all national tools available in taking action against those responsible for ransomware operations threatening critical infrastructure and public safety, the nations said in a joint statement.
Great Britain, Australia, India, Japan, France, Germany, South Korea, the European Union, Israel, Kenya, Mexico, and others were among those that joined in the virtual gathering on Wednesday and Thursday.
During the summit, nations recounted their agonizing experiences with cyber-extortion, including a digital disaster declaration in Germany and Israel even announcing a blitz was underway against a major hospital.