Connect with us

Business

Ransomware menace plagues Sri Lankan businesses: Kaspersky

Published

on

A total of 2,650 ransomware incidents were detected and blocked by Kaspersky cybersecurity solutions for businesses in Sri Lanka from January to December 2023.

Experts from the global cybersecurity company insist on organisations, regardless of shape and size, to beef up their IT security posture as ransomware, especially the targeted type, continues to be a damaging menace for organisations in the region.

“The era of widespread mass attacks by encryptors on both individuals and businesses is gradually fading away. Instead, we are witnessing a shift towards organised groups that execute hacks involving data theft and encryption, commonly referred to as double extortion. The rationale behind this evolution lies in the perpetrators’ ability to operate with greater efficiency, thereby enabling them to demand significantly higher ransom sums,” says Fedor Sinitsyn, Lead Malware Analyst at Kaspersky.

Last year, ransomware incidents in Sri Lanka include the compromise of 5,000 government-related emails as well as attacks on telecom servers.

“It’s evident that the threat actors behind ransomware attacks target all sectors in Sri Lanka. The total number of attempts may be low, but organisations need to realise the real impact of each successful ransomware infection, both on the financial and reputation fronts. It’s imperative for businesses here to look into cybersecurity technologies that provide absolute anti-ransomware effectiveness in third-party exams. Because not all cybersecurity solutions are created equal,” Yeo Siang Tiong, General Manager for Southeast Asia at Kaspersky.

Kaspersky Endpoint Security for Business, Kaspersky Small Office Security and Kaspersky Standard demonstrated complete protection against ransomware in 10 different real-life attack scenarios during regular Advanced Threat Protection assessments held by AV-TEST.

To combat ransomware and assist those affected, Kaspersky, alongside Europol, the Dutch National Police, and others has the No More Ransom initiative, launched in 2016. On the official website, participants provide decryption tools, guidelines, and instructions to report cybercrimes, irrespective of the location of the incident.

By the end of 2023, Kaspersky marked the seventh anniversary as a key contributor to the No More Ransom initiative. This period witnessed expanded access to Kaspersky’s free decryption tools, in line with its commitment to combating ransomware. These tools, targeting 39 ransomware families, have been integral in assisting nearly 2 million victims globally, as reported by Europol, underscoring the profound impact of the No More Ransom initiative supported by Kaspersky.

To protect yourself and your business from ransomware attacks, consider following the rules proposed by Kaspersky experts:

Do not expose remote desktop/management services (such as RDP, MSSQL, etc.) to public networks unless absolutely necessary and always use strong passwords, two-factor authentication and firewall rules for them.

Promptly install available patches for commercial VPN solutions providing access for remote employees and acting as gateways in your network.

Always keep software updated on all the devices you use to prevent ransomware from exploiting vulnerabilities.

Focus your defense strategy on detecting lateral movements and data exfiltration to the Internet. Pay special attention to the outgoing traffic to detect cybercriminals’ connections.

Back up data regularly with special attention to offline backup strategies. Make sure you can quickly access it in an emergency when needed.

Avoid downloading and installing pirated software or software from unknown sources.

Assess and audit your supply chain and managed services’ access to your environment.

Prepare an action plan for reputational risk of your data exposure in the unfortunate event of data theft.

Use solutions like Kaspersky Endpoint Detection and Response Expert and Kaspersky Managed Detection and Response service which help to identify and stop the attack on early stages, before attackers reach their final goals.

To protect the corporate environment, educate your employees. Dedicated training courses can help, such as the ones provided in the Kaspersky Automated Security Awareness Platform.

Use the latest Threat Intelligence information to stay aware of actual TTPs used by threat actors. The Kaspersky Threat Intelligence Portal is a single point of access for Kaspersky’s TI, providing cyberattack data and insights gathered by our team for over 26 years.



Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Business

IMF talks conclude without staff-level agreement as Sri Lanka prepares November Budget

Published

on

Fund says discussions will continue on policies and parameters needed to complete the Seventh Review

By Sanath Nanayakkare

Sri Lanka’s latest talks with the International Monetary Fund (IMF) have concluded without a staff-level agreement on the policies and parameters required to complete the Seventh Review of its Extended Fund Facility (EFF), leaving further discussions ahead as the government prepares its next Budget.

An IMF team led by Mission Chief Evan Papageorgiou visited Sri Lanka from September 10 to 23 for discussions on the Seventh Review and the 2026 Article IV Consultation.

The Fund said the discussions with Sri Lankan authorities had been productive, but would continue in the near term towards reaching agreement on the parameters and policies needed to complete the Seventh Review.

The outcome therefore represents a delay in reaching the formal staff-level milestone rather than a breakdown in negotiations.

The latest mission comes as Sri Lanka moves from economic stabilisation towards longer-term structural transformation, while continuing to face external shocks and domestic fiscal pressures.

The IMF said economic activity expanded by 4.2 percent in the second quarter of 2026, marking the 11th consecutive quarter of growth. At the same time, the Fund cautioned that downside risks remained, particularly amid an uncertain external environment.

Gross official reserves had risen to US$6.9 billion by the end of August, while the banking sector remained well capitalised and profitable, providing some buffers against external pressures.

A major focus of the IMF’s latest assessment was Sri Lanka’s revenue position.

The Fund said developing and implementing a strong medium-term revenue strategy would be critical to sustaining revenue mobilisation and strengthening fiscal resilience.

It stressed the need to broaden the tax base, rationalise tax exemptions and incentives, and strengthen revenue administration and compliance.

The IMF also emphasised the importance of maintaining cost-recovery energy pricing and improving the efficiency and fairness of the tax system in order to reduce fiscal vulnerabilities.

These issues assume particular significance as the government prepares its next Budget, with the authorities seeking to balance revenue mobilisation and fiscal consolidation against the need to sustain economic recovery.

The Fund’s latest position does not indicate that negotiations have broken down. Rather, the IMF has said that discussions will continue towards reaching agreement on the remaining policies and parameters required to conclude the Seventh Review.

The latest talks follow the combined Fifth and Sixth Reviews, for which IMF staff and Sri Lankan authorities reached a staff-level agreement in April, subject to completion of the remaining requirements before consideration by the IMF Executive Board.

For Sri Lanka, the immediate challenge is therefore to preserve the gains made in macroeconomic stabilisation while addressing the remaining issues under the IMF programme and preparing a Budget capable of supporting longer-term fiscal and economic resilience.

With further discussions expected in the near term, the Seventh Review remains a work in progress as Sri Lanka enters another critical stage of its economic reform programme.

Notably, the IMF has yet to publicly specify the outstanding issues that remain to be resolved.

Continue Reading

Business

UK digital expertise and Sri Lankan business leaders unite to explore growth through technology

Published

on

British High Commissioner Andrew Patrick

British High Commissioner Andrew Patrick hosted UK digital product consultancy Apadmi at Westminster House, his official residence in Colombo, for an invite-only forum bringing together senior business leaders from across Sri Lanka’s retail, banking, telecommunications, hospitality and public sectors.

The event, “Turning Digital Assets into Growth Engines”, marked Apadmi’s first official event in Sri Lanka since establishing its Colombo office in 2025, and was delivered in partnership with the British High Commission as part of ongoing efforts to strengthen UK and Sri Lanka commercial and technology ties.

Guests were welcomed by High Commissioner Andrew Patrick, followed by a keynote from Niresh Muthuratnanandan, Head of Omni Commerce, Digital & Loyalty at Keells Supermarkets, who spoke about the launch of the Keells Nexus app and the modernisation of a loyalty programme serving 2.9 million members.

A panel discussion followed, hosted by Mark Collin, Chief Growth Officer at Apadmi, and featuring Malik Induruwana, Chief Information Officer at HSBC Sri Lanka & Maldives; Jiffry Zulfer, Founder and CEO of PickMe; Uthpala Pinnaduwahewa of Hatton National Bank; and Marcus Hadfield, Chief Strategy Officer at Apadmi.

 The discussion centred on the commercial opportunity created by Sri Lanka’s rapid mobile adoption. According to [source], mobile data usage in the country reached 1.03 million terabytes in Q2 2026, a 31% increase year on year, against 29.4 million mobile subscriptions. With 71% of devices now smartphones or tablets, speakers discussed how Sri Lankan businesses could convert growing digital engagement into customer loyalty, new revenue and operational efficiency.

British High Commissioner Andrew Patrick said:

“It was a pleasure to welcome Apadmi and such a strong group of business leaders to Westminster House for this event. The UK and Sri Lanka have a longstanding partnership, and digital innovation is an increasingly important part of that relationship. Apadmi’s decision to establish a base in Colombo reflects the confidence that UK companies have in Sri Lanka’s digital economy, and I look forward to seeing this partnership continue to grow to the benefit of both our countries.”

 Mark Collin, Chief Growth Officer at Apadmi, said:

“Being hosted by the British High Commission was a real privilege, and a fitting way to mark the next stage of our commitment to Sri Lanka. To bring leaders from Keells, HSBC, PickMe and Hatton National Bank into the same room says a great deal about the ambition here. We opened our Colombo office because we believe Sri Lanka is at a genuine turning point; the talent is exceptional, and we are proud to be building here for the long term.”

Continue Reading

Business

Planters’ Association Chairman proposes 5-point plan for industry revival at 172nd AGM

Published

on

Seated from left to right: newly elected Deputy Chairman of the Planters’ Association of Ceylon (PAC), Binesh Pananwala; Secretary General, Lalith Obeyesekere; newly elected Chairman, Shanaka Samaradiwakara; Governor of the Central Bank of Sri Lanka, Dr. Nandalal Weerasinghe; and Chairman of the Sri Lanka Tea Board, Raj Obeyesekere.

Malwatte Valley Plantations PLC Director / CEO, Shanaka Samaradiwakara was appointed as Chairman of the Planters’ Association of Ceylon (PAC), while Kahawatte Plantations PLC Director / CEO Binesh Pananwala, was appointed as Deputy Chairman at the Association’s 172nd Annual General Meeting (AGM) on 19 September at the Cinnamon Grand.

The event was graced by Central Bank of Sri Lanka Governor, Dr. Nandalal Weerasinghe and Sri Lanka Tea Board Chairman, Raj Obeyesekere as Chief Guest and Guest of Honour respectively.

In his inaugural address, Samaradiwakara outlined a five-point vision for the plantation sector, focusing on value addition, research and development, land-use and productivity, irrigation and long-term security of tenure. He emphasised that the future of commercial agriculture in Sri Lanka would hinge on how effectively all industry stakeholders could work together, while maintaining clear understanding of the ground realities faced by producers.

Value-added tea accounted for more than 50% of total tea export volumes in 2025. Samaradiwakara noted Regional Plantation Companies (RPCs) have accounted for the majority of that volume through continuous investments, including most recently in matcha, green tea and artisanal teas.

In that context, he sought the support of the Sri Lanka Tea Board and the export sector to protect this emerging high value segment, given that significant quantities of green tea and other high-value teas remain unsold at auction while similar products continue to enter the country. “We respectfully request the authorities to review this matter and introduce appropriate measures to support domestic production and value addition,” he stated.

On research and development, he observed that commercially viable alternatives to several essential crop protection products remain limited. Accordingly, he called on the Tea, Rubber and Coconut Research Institutes to lead the development of practical, scientifically proven alternatives, while stressing that disease threatening the rubber industry requires immediate attention. “We cannot afford to repeat the experience of the coffee industry, where coffee blight devastated the sector,” he added.

Turning to issues around land-use policies and productivity, he noted that RPCs have diversified for over two decades in response to changing rainfall patterns, introducing crops such as oil palm, pepper and avocado. He warned that these investments are increasingly threatened by unsupportive policy, agricultural theft and crop damage by wild animals, costing companies millions of rupees each month in security. “It is imperative that these investments are protected through strong enforcement, appropriate regulatory reforms, and effective measures to address both agricultural theft and crop damage,” he noted. On irrigation, he appealed to the Government to relax archaic restrictions on groundwater use and simplify approvals for drilling tube wells in order to enhance climate resilience.

Addressing security of tenure, he highlighted that replanting often takes more than a decade to generate meaningful revenue, and that uncertainty over lease extensions is making it harder for RPCs to attract foreign direct investment and long-term financing. “If we are to attract fresh capital, accelerate replanting, modernise our plantations and improve productivity, security and certainty of tenure are mandatory,” he added.

Continue Reading

Trending