{
  "id": 7695662,
  "title": "Ransomware activity rises across Middle East as criminal groups attack Gulf",
  "url": "https://urgent.news/2026/09/16/ransomware-activity-rises-across-middle-east-as-criminal-groups",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-16T03:30:00.000Z",
  "source": {
    "name": "The National Business",
    "slug": "the-national-business",
    "url": "https://www.thenationalnews.com/future/technology/2026/09/16/ransomware-activity-rises-across-middle-east-as-criminal-groups-attack-gulf/"
  },
  "original_language": "en",
  "account": "Ransomware attacks in the Middle East have surged recently, targeting Gulf businesses and sectors, according to a new study by cybersecurity firm CloudSEK. From April to June 2025, CloudSEK recorded the number of ransomware incidents skyrocket from 17 to 357. Shashank Shekhar, CloudSEK's managing editor, explained that the Middle East was previously not a primary target for ransomware, but this changed rapidly in 2025. Groups such as The Gentlemen and Nova have been actively targeting Saudi businesses and other Gulf companies. Established criminal groups are now focusing on the region, taking advantage of the growing digital infrastructure and common vulnerabilities like unpatched firewalls and VPN gateways as entry points. Experts noted that ransomware is a borderless activity, with attackers prioritizing the easiest and most profitable victims rather than their location. Israel and Turkey faced distinct threats; Israel faced targeted attacks due to its nature, while Turkey attracted ransomware groups due to its industrial sectors. Critical infrastructure is especially attractive, as disruptions can lead to higher ransoms required for service restoration. A recent incident in the UAE saw a hacker demand over $5 million after claiming to breach a private company, destroy data, and attempt to leak stolen information. UAE authorities collaborated with the company to neutralize the attack. The UAE saw a significant rise in cyber threats since the war began, with over 800,000 hacking attempts per day as of April. Iranian-linked groups, along with China, Israel, North Korea, and Russia, were involved in various cyber operations, with AI tools amplifying established methods and lowering the entry barrier for new hackers.",
  "summary": "Ransomware activity across the Middle East has risen sharply, with organised criminal groups increasingly taking aim at Gulf businesses and sectors where disruption can put greater pressure on victims to pay, according to new research. Ransomware activity tracked by cybersecurity company CloudSEK rose from 17 incidents in April 2025 to 357 in June this year, with the company saying the increase…",
  "key_points": [
    "Ransomware attacks surged 20-fold in Middle East from April to June 2025",
    "Groups like The Gentlemen and Nova targeted Gulf businesses and sectors",
    "Critical infrastructure in UAE and Turkey attracted ransomware groups"
  ],
  "editors_take": "The surge in ransomware attacks across the Middle East, particularly in the Gulf region, marks a shift in focus by established criminal groups exploiting growing digital vulnerabilities for profit.",
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "The National UAE",
        "title": "Ransomware activity rises across Middle East as criminal groups attack Gulf",
        "url": "https://urgent.news/2026/09/16/ransomware-activity-rises-across-middle-east-as-criminal-groups-7700502",
        "published": "2026-09-16T03:30:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}