![]() “Commodity malware can seem like a sandstorm of low-level noise clogging up the security alert system. For instance, in 2020, used to deliver its ransomware. If human operators are behind these types of threats, they’ll review every compromised machine for its geolocation and other signs of high value, and then sell access to the most lucrative targets to the highest bidder, such as a major ransomware operation. ![]() Such threats can seem like low level malware noise, but they are designed to secure a foothold in a target, gather essential data and share data back to a command-and-control network that will provide further instructions. Everyday threats such as commodity malware, including loaders and botnets, or human-operated Initial Access Brokers, will demand serious security attention. In many ways, it is almost impossible to predict where ransomware will go next, but the attack trends discussed in this year are likely to continue into 2021.”Ģ. If one threat disappears another one will quickly take its place. The cyberthreat landscape abhors a vacuum. “Some, like Maze, appeared to pack their bags and head for a life of leisure, except that some of their tools and techniques have resurfaced under the guise of a newcomer, Egregor. However, we’ve also seen ransomware families sharing best-of-breed tools and forming self-styled collaborative ‘cartels,’” said Chester Wisniewski, principal research scientist, Sophos. During 2020, Sophos saw a clear trend towards adversaries differentiating themselves in terms of their skills and targets. “The ransomware business model is dynamic and complex. In 2020, Sophos reported on, RagnarLocker,, , and others using this approach. At the other end of the spectrum, Sophos anticipates an increase in the number of entry level, apprentice-type attackers looking for menu-driven, ransomware-for-rent, such as, that allows them to target high volumes of smaller prey.Īnother where alongside the data encryption the attackers steal and threaten to publish sensitive or confidential information, if their demands are not met. At the high end, the big-game hunting ransomware families will continue to refine and change their tactics, techniques and procedures (TTPs) to become more evasive and nation-state-like in sophistication, targeting larger organizations with multimillion-dollar ransom demands. The gap between ransomware operators at different ends of the skills and resource spectrum will increase. ![]() Three key trends analyzed in the Sophos 2021 Threat Report include:ġ. The report, written by SophosLabs security researchers, as well as Sophos’ threat hunters, rapid responders, and cloud security and AI experts, provides a three-dimensional perspective on security threats and trends, from their inception to real-world impact. 18, 2020 (GLOBE NEWSWIRE) -, a global leader in next-generation cybersecurity, today published the, which flags how ransomware and fast-changing attacker behaviors, from advanced to entry level, will shape the threat landscape and IT security in 2021.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |