Smartphones, smartwatches, tablets, TVs and fitness trackers are now all at risk of being held to ransom by cyber criminals.
With almost every device we now own being connected to the internet in some way cyber criminals are being given a window of opportunity to start deploying increasingly “aggressive” and “confrontational” attacks.
This warning has come from a joint report by the National Cyber Security Centre (NCSC) and the National Crime Agency (NCA).
The report’s aim is to highlight the absolutely vast amount of deeply personal information that we now store on devices that can be hacked.
While not valuable in broader sense, this information is priceless to us, and so gives hackers a huge window of opportunity to hold us to ransom.
The study forecasts that this year it is likely that “ransomware” will target connected devices containing data such as photos, emails and even fitness progress information.
“This data may not be inherently valuable, and might not be sold on criminal forums but the device and data will be sufficiently valuable to the victim that they will be willing to pay for it,” the assessment says.
“Ransomware on connected watches, fitness trackers and TVs will present a challenge to manufacturers, and it is not yet known whether customer support will extend to assisting with unlocking devices and providing advice on whether to pay a ransom.”
A surge in the number and variety of internet-ready products has sparked a string of security warnings.
There have even been suggestions that baby monitors and pacemakers could be vulnerable to hacking.
Analysts have forecast that by 2020 there will be as many as 21 billion connected devices used by businesses and consumers around the world.
The NCSC and NCA’s 2016/17 report on the cyber threat to UK business says: “The rise of internet connected devices gives attackers more opportunity.”
The paper notes that smart devices are still “inherently more difficult” to attack than traditional computers, saying that incidents may initially be limited to users who download apps from third-party app stores.
Ministers launched the NCSC, which is part of GCHQ, amid mounting concern over the potential danger to Britain’s industry and infrastructure from online attacks.
The new report says the cyber threat to UK business is “significant and growing”.
In three months after the centre was created, there were 188 “high-level” attacks as well as “countless” lower-level incidents.
The danger is “varied and adaptable”, ranging from high-volume, opportunistic attacks to “highly sophisticated” and persistent threats.
The last year “has been punctuated by cyber attacks on a scale and boldness not seen before”, the report says, pointing to a string of incidents including the targeting of the US Democratic Party and Bangladesh Bank.
Ciaran Martin, chief executive of the NCSC, said: “Cyber attacks will continue to evolve, which is why the public and private sectors must continue to work at pace to deliver real-world outcomes and ground-breaking innovation to reduce the threat to critical services and to deter would-be attackers.”
The report will be published on Tuesday as the NCSC hosts a major conference, CYBERUK, in Liverpool.
It also says that there is no clear understanding of the true scale and cost of cyber attacks to the UK as it is under-reported.
Donald Toon, director for economic and cyber crime at the NCA, said: “Businesses reporting cyber crime is essential if we are to fully understand the threat, and take the most effective action against it.”
It comes days after it was revealed that GCHQ has warned political parties of the the threat posed to democracy by Russian hackers.