Middle Eastern Banks Boost Cybersecurity in the Face of Growing Ransomware Risks

Cyber Wargaming Reveals Security Vulnerabilities

Growing ransomware threats and geopolitical cyber dangers continue to be major concerns as the UAE’s financial industry wrapped up its yearly cyberattack exercise. In order to test their defenses against simulated cyberattacks, banks and financial institutions from all around the Middle East took part in the fourth annual Cyber Wargaming exercise in the United Arab Emirates. Experts caution that the region’s financial sector is at risk due to the quickening pace of digital transformation and a lack of qualified cybersecurity specialists.

Cyber Wargaming’s Significance for Financial Security

According to Jamal Saleh, director general of the UAE Banks Federation, cyber wargaming has emerged as a crucial instrument for identifying weaknesses and creating efficient defenses. He underlined the importance of these exercises in addressing the risks related to digital infrastructure and transactions, particularly in light of the growing prevalence of AI-driven cyberthreats. The need of cybersecurity in preserving a secure and cutting-edge banking environment is becoming increasingly apparent to the financial industry.

A Top Target for Cybercriminals: The Financial Sector

According to recent reports, banks and financial institutions were the focus of 21% of cybersecurity incidents in the region, making them the second most attacked sector behind government agencies (35%). According to Shilpi Handa, associate research director at IDC for the Middle East, Turkey, and Africa, phishing scams, data breaches, and identity theft are replacing traditional distributed denial-of-service (DDoS) attacks as cybercriminals hone their tactics.

The UAE has invested $2 billion in cybersecurity.

More than $2 billion has been pledged by the UAE to improve digital infrastructure and cybersecurity. Strengthening national cyber defenses, protecting vital infrastructure, and updating antiquated security frameworks are the goals of this effort. The vice president of Phosphorus Cybersecurity, Osama Al-Zoubi, emphasizes the significance of modernizing outdated systems that were not built to withstand the sophisticated cyberthreats of today. The effort aims to protect financial institutions and increase resilience against changing threats.

Growing Ransomware and Shifting Attack Techniques

Ransomware continues to be one of the biggest risks to financial institutions in spite of efforts to improve cybersecurity. In 2024, there were 19 ransomware groups that targeted UAE enterprises, up from 12 in 2023. The most active of these gangs were RansomHub and LockBit. According to the “State of the UAE Cybersecurity” study, LockBit is still the most widely utilized ransomware in the area, despite its influence having somewhat waned.

Financial Institutions as Targets with High Value

Because the financial industry is eager to pay ransoms, it remains a profitable target for ransomware gangs. Although some hackers have national ties, the majority of ransomware assaults are driven more by financial than by political motivations, according to Ray Kafity, vice president of Halcyon. It is anticipated that ransomware assaults would continue until financial incentives are removed.

Growing Attack Surfaces Present New Difficulties

The banking sector’s quick digitization has greatly increased the attack surface of UAE firms. According to CDX data, the number of sensitive assets exposed to possible cyber threats increased from 155,000 in 2023 to over 223,000 in 2024. Outdated software and unprotected linked devices, such as financial transaction terminals and Internet of Things-based infrastructure, are mostly to blame for these vulnerabilities.

Increasing Visibility to Strengthen Cyber Resilience

According to Al-Zoubi, financial institutions need to increase visibility into their network of connected devices in order to reduce security concerns. This issue is addressed by the UAE’s cyber-resilience project, which places a high priority on IoT device security in banking settings. Maintaining thorough defenses against cyber threats is still of utmost importance as financial institutions depend more and more on linked digital systems.

Cyber Threats Are Influenced by Geopolitical Factors

In addition to financially motivated cybercriminals, attacks motivated by ideological and geopolitical motivations have increased in the Middle East. According to research, Saudi Arabia and the United Arab Emirates are the targets of 66% of cyberattacks in the region. The cybersecurity issues in the region are made worse by hacktivists and nation-state actors that take advantage of weaknesses for strategic and political ends.

Prospects for the Future: An Appeal for Preemptive Defense

Financial institutions in the Middle East need to implement proactive cybersecurity measures as cyber threats continue to change. Mitigating risks will require bolstering cyber resilience through investment, worker development, and state-of-the-art technology. The area is taking major measures to protect its financial industry from new digital dangers, including regular cyber wargaming exercises and government-backed security programs.