Considering the wave and dimensions of online attacks in the last couple of years, cyber-attacks in 2019 are expected to get more sophisticated with jump in even hand-delivered and targeted breaches, a report by the cyber security group, SophoLabs, has projected.
In the report, SophosLabs researchers revealed that observed changes in the threat landscape over the past 12 months, have shown unprecedented emerging regime of attacks.
Giving a clearer insight, the Chief Technical Officer of the British Security Software and Hardware Company, Sophos, Joe Levy, said the threat landscape is undoubtedly evolving; less skilled cyber criminals are being forced out of business, the fittest among them step up their game to survive and we’ll eventually be left with fewer, but smarter and stronger, adversaries.
He hinted that “These new cybercriminals are effectively a cross-breed of the once esoteric, targeted attacker, and the pedestrian purveyor of off-the-shelf malware, using manual hacking techniques, not for espionage or sabotage, but to maintain their dishonorable income streams.
SophosLabs 2019 Threat Report disclosed that Capitalist cybercriminals are turning to targeted ransomware attacks that are premeditated and reaping millions of dollars in ransom.
While revealing that “The 2018 attacks saw the advancement of hand-delivered, targeted ransomware hits that are earning cybercriminals millions of dollars,” it noted that targeted ransomware is more damaging than if delivered from a bot, as human attackers can find and stake out victims, think laterally, trouble shoot to overcome roadblocks, and wipe out back-ups so the ransom must be paid.
With illegal Android apps on the increase, Sophos pointed out that 2018 has seen an increased focus in malware being pushed to phones, tablets and other IoT devices.
The report disclosed that 2019 cybercriminals are using readily available Windows systems administration tools which mean a shift in threat execution, as more mainstream attackers now employ Advanced Persistent Threat (APT) techniques to use readily available IT tools as their route to advance through a system and complete their mission.
Key targets of their breaches which include steal sensitive information off the server or drop ransomware are likely to deepen on mobile and IoT malware as Malware’s impact extends beyond the organization’s infrastructure as threats from mobile malware grow apace.
However, as homes and businesses adopt more Internet-connected devices, criminals have been devising new ways to hijack those devices to use as nodes in new generation attacks from 2019.
Accordingly, experts have advised that organizations must have adequate measures against attacks come next year.