2020 has also been an
important year for cybersecurity and we have analyzed the cyber threats that
may be a trend for this year. The pandemic had a major influence on the threat
environment, being the predominant lure in many phishing campaigns and fraud attempts.
We have had to telecommute
more and adapt quickly. Awareness, technology and communications have been a
very important bulwark. But on the opposite side, cybercrime has also increased
its activity and capabilities, knowing that its opportunities are growing in an
increasingly interconnected world.
It has also been a year of
critical vulnerabilities accompanied by the increase and sophistication of the
tactics, techniques and procedures (TTPs) used by increasingly professionalized
groups.
Without a doubt, 2021 will be
a year in which all these threats (and more) will continue to rise, where
companies and organizations must be as well prepared as possible, continuously
improving and evolving their defenses".
We should be focusing on the protection
of our data from cyber threats by using total
security software that will be protecting us from all the threats and crime
that are happening on internet.
Within this framework, in the
Global Cyber Threat Response (CTR) team we review the trends and forecasts of
the cyber threat landscape for 2021.
These Are The 5 Cyber Threats That Will Be A Trend
This Year According To Our Analysis:
The ransomware boom continues
The escalation of incidents
related to ransomware in 2020, in terms of the number of attacks, ransoms
demanded and paid, retaliation against non-payers and the large number of
actors involved, appears to continue until 2021: there is no logical reason for
this to be stop, what's more, it is expected to continue its unstoppable rise. In
fact, it is estimated that one of the great targets will continue to be large
corporations and organizations, including governmental ones, known as Big Game
Hunting (BGH) that brings greater benefits.
It is also estimated that more
aggressive and incorporated extortion methods will continue to be used in
recent campaigns, such as the threat of publishing exfiltrated data (leaks) or
disrupting a company's services through distributed denial of service (DDoS) attacks.
Attacks on the supply chain
The prospect of an actor
compromising a company by attacking its vendor's systems is not new, but it is
beginning to be taken very seriously after the attack on Solar Winds that was
discovered late last year and that affected thousands adjacent to it of your
customers.
An intrusion into the network
of a partner company could allow multiple types of attacks against the victim
company: 'backdoorization' of the software used, lateral movement, manipulation
and theft of data, DoS, ransomware, etc.
The lack of control over
supplier cybersecurity, the immediate and lasting impact on operations, the uncertain
time before resolution all these factors must be taken into account for years
to come.
Cloud security takes center stage again
Before the start of the
ransomware boom in late 2019, the main focus of cybersecurity that year had
been the vulnerability of cloud storage solutions.
Many companies suffered
different data breaches after repositories such as Amazon S3 buckets were
configured incorrectly, for example giving more access and privileges than
necessary.
Concerns about cloud security
returned in late 2020 and will continue this year as more and more
organizations advance their cloud transformation programs, creating more
opportunities for failure.
Mobile devices and IoT in the spotlight
Although mobility has been
restricted by the pandemic, we are still “glued” to our smartphones, we all use
laptops to work from home as well, and little by little our homes are getting
smarter with increasingly affordable devices called the Internet of Things. The
cybercriminals are no stranger to this trend and continue to increase the
malware designed specifically for these devices.
On the other hand, this
problem is likely to escalate once 5G has a significant footprint. This
technology will allow a closer monitoring of users, and will make the
adaptation of IoT capacity to devices that currently do not have it
economically viable, creating completely new classes of potentially vulnerable
devices.
Deepfakes go from theory to reality
The quality of spoofs has
steadily improved since they first emerged as a theoretical threat several
years ago. In August 2019, the CEO of a company was tricked into making a bank
transfer only by falsifying the voice in a phone call.
Technology has continued to
improve. Increased computing capabilities and Artificial Intelligence could
make 2021 a year in which deepfakes and evasion of biometric techniques begin
to be used more widely for use in fraud.
Comments
Post a Comment