Recommendation 3

Russian-speaking actors are the source of most attributable ransomware attacks against UK targets. The Russian Government’s tacit (or even explicit) approval of these attacks is consistent with the Kremlin’s disruptive, zero-sum-game approach to the West. It also provides revenue to the Putin regime’s well-oiled network of corruption and criminality. This is not a straightforward state threat, however. For many Russian hackers, ransomware is simply an easy way to make large sums of money, with next-to-no chance of being caught or prosecuted. Regardless of the extent of state involvement, or whether they are ideologically driven rather than financially, the sheer scale of the threat demonstrates how vital it is that the UK is adequately resourced to upscale its defences, and to prepare for a major attack. (Paragraph 32) Strengthening our defences — UK preparedness and resilience