Evidence of compromise present in almost all enterprise networks

guest · Mar 18, 2020

Evidence of compromise present in almost all enterprise networks
Traffic hiding, network scanning and malware activity were all found
March 18, 2020
https://www.itproportal.com/news/evidence-of-compromise-present-in-almost-all-enterprise-networks/

Almost all large organisations in Eastern Europe have been compromised to some extent. This is according to a new report from Positive Technologies, which claims 97 percent of companies with at least 1,000 employees show signs of suspicious network activity.
Of all compromised networks, 64 percent exhibited instances of traffic hiding (VPN tunnelling, connecting to the Tor network and proxying).

"Traffic hiding is risky, because when the employees connect to Tor, set up proxy servers, and set up VPN to bypass websites blocking, the hackers can use the same technologies to communicate with command and control servers," said Evgeny Gnedin, Head of Information Security Analytics at Positive Technologies.
Further, 81 percent of companies’ advanced network traffic analysis detected malware activity, including miners, adware and spyware.

In a third of cases, internal networks had been scanned, which includes multiple failed attempts to connect to hosts. The report suggests this could mean hackers had attempted to map out the network.
Click to expand...

According to Positive Technologies, in many cases compromise is caused by a lack of attention to company policies. In 94 percent of companies, employees are not compliant with information security policies, “opening the door for the hackers to exploit”.
Click to expand...

Positive Technologies: Positive Technologies says 97% of Company Networks Carry Traces of Compromise

Positive Technologies experts have analysed network activity of large companies (with over 1000 employees) in the key economic areas of Eastern European countries 1. Advanced network traffic analysis revealed suspicious activity in 97 percent of companies, and malware activity in 81 percent of companies.
[...]
The vast majority of threats (92 percent) were detected inside the perimeter. The experts believe this emphasises that internal network monitoring to ensure timely detection and response is just as important as preventing attacks on the perimeter. This includes network traffic analysis which can help in detecting attackers in the early stages of the attack.
Click to expand...

Positive Technologies: Top cybersecurity threats on enterprise networks
"Network traffic analysis: field findings" (PDF - 7.05 MB):
https://www.ptsecurity.com/upload/corporate/ww-en/analytics/network-traffic-analysis-2020-eng.pdf

mirimir · Mar 18, 2020

As I recall, that was the expectation in the 90s.

But then, they were mainly just in it for fun, and you mainly didn't want to annoy them.

Now it's all about money, or so I've read.

Log in or Sign up

Evidence of compromise present in almost all enterprise networks

guest Guest

mirimir Registered Member

Log in or Sign up

Evidence of compromise present in almost all enterprise networks

guest Guest

mirimir Registered Member

Useful Searches