The Limited Times

Now you can see non-English news...

Cyberattacks to hijack data doubled in the last six months

2022-08-18T15:30:43.040Z


You no longer need to be an expert 'hacker' to direct a computer virus; on the dark web, this service is offered in exchange for a fee. The 'ransomware' modality is becoming popular, according to an annual cyber threat report


CybersecurityUNSPLASH

Data hijacking or

ransomware

is one of the most feared cyberthreats, especially in the professional field, where the information is more sensitive and often essential for the functioning of the organization or company (when not decisive for its security).

Over the last six months, variants of this technique, in which cybercriminals encrypt data and demand a ransom to release it, have nearly doubled.

That is what determines the Global Threat Index prepared by Fortinet, a cybersecurity company from the United States.

"

Ransomware

remains a top threat, and cybercriminals continue to invest significant resources in new attack techniques," the report explains.

In half a year the company has registered 10,666 variants compared to 5,400 in the previous semester.

Teleworking has contributed to the growth of this type of attack since the start of the covid-19 pandemic.

José Luis Laguna, director of engineering at Fortinet Iberia, explains: “We telework a lot and, in most cases, the devices we use are connected to poorly protected networks.

The mobile, tablet or work computer that you use at home is not connected to the work network, which could also be attacked, but at home these devices are easier to attack and that is why cyber attackers concentrate their efforts there” .

More information

The CSIC is offline: X-ray of a 'ransomware', the cyberattack that everyone fears

According to the company, the ransomware

-as-a-service (

Raas

) model, which has been gaining popularity on the dark internet

,

also contributes to the rise of ransomware variants, according to the company

.

As if it were Netflix, developers offer subscription models that allow criminals with less (or no) experience to carry out a targeted cyberattack and become consumers.

“Just like your favorite subscription service offers you series, order food delivery or visit a place, the

Raas

allow criminals access to

ransomware

and other malicious programs for a monthly payment or a commission”, he details.

Despite international efforts and actions to tackle these crimes, they continue to pose a significant threat to organizations regardless of their size.

“Instead of attacking like mad, cybercriminals are becoming more sophisticated and their efforts more targeted.

Instead of sending

ransomware

to someone and trusting them to pay,

now they decide who they want to attack”, insists Laguna.

The number of disk deletions has also multiplied in the first half of the year, which, according to the company's representative, is not aimed at extortion, but rather "to do as much damage as possible".

Fortinet has identified seven major disk wipe threats in the first half of the year.

Although

a priori

it may be a tiny figure, it is the same number of deletion variants identified from 2012 to last year.

What has triggered such growth in this case has been the invasion of Ukraine.

Although difficult for investigators to determine with complete confidence, the perpetrators are often Russian sympathizers with military objectives and a clear sabotage intent.

The victims of these erasures are usually government or military agencies and Ukrainian organizations.

Of course, what is striking about these attacks is that, since the invasion began last February, more threats have been detected outside Ukraine than there, although they are also related to the war.

Faced with cyber threats, which do nothing more than evolve and try to dodge the defense mechanisms of the systems, the analysis confirms the importance of artificial intelligence to be able to deal with dangers in a more efficient way: "Organizations need security operations that can run at machine speed to keep up with the volume, sophistication and pace of today's cyber threats," summarizes the text, which also stresses how necessary cybersecurity awareness and training are for both employees and security teams are aware of the dangers.

“Cybercriminals are never going to let an opportunity pass them by.

Whether it's a vulnerability or a war, there's always going to be someone trying to do harm for profit."

You can follow EL PAÍS

TECNOLOGÍA

on

Facebook

and

Twitter

or sign up here to receive our

weekly newsletter

.

Source: elparis

All tech articles on 2022-08-18

You may like

Trends 24h

Latest

© Communities 2019 - Privacy

The information on this site is from external sources that are not under our control.
The inclusion of any links does not necessarily imply a recommendation or endorse the views expressed within them.