SophosLabs surveys the threat landscape for 2020 trends

guest · Nov 5, 2019

SophosLabs surveys the threat landscape for 2020 trends
November 5, 2019
https://news.sophos.com/en-us/2019/11/05/sophoslabs-surveys-the-threat-landscape-for-2020-trends/

SophosLabs this morning published its annual assessment on the state of internet and information security, and our outlook on what security threats are likely to affect the world in the coming year: the SophosLabs 2020 Threat Report, available for download now.

This year, our report broadens the scope of our analysis to cover topics beyond Sophos’ historic core-competencies in desktop malware and spam prevention to more accurately reflect the broader range of security issues the company helps customers address and mitigate today.
Attacking like a boss
We’ve named one of the big trends that’s been on the rise in 2019 automated active attacks; These involve human-directed compromise of internal networks, followed by the use of standard Windows network administration tools such as WMI and PowerShell to rapidly distribute malware throughout a large enterprise network all at once.

This method was used, for example, by the threat actors behind the SamSam ransomware, and later adopted by other threat actors involved in the distribution of ransomware targeting large networks, such as the criminals behind the MegaCortex ransomware.
Click to expand...

Criminals run roughshod over RDP
The Remote Desktop service and its client application have been essential Microsoft network management tools for years, but 2019 saw a significant leap in both “shotgun” and targeted attacks against this standard Windows component
Click to expand...

Computer Weekly: Ransomware authors seeking new ways to avoid being spotted

Ransomware authors are changing up their campaigns to evade existing security controls, obfuscating their origins, and some are even adapting to use vulnerabilities in monitoring and management tools against their owners, according to the SophosLabs 2020 threat report.

However, said Sophos, ransomware has one Achilles heel – encrypting data is a time-consuming process limited by the processing power of the victim’s CPU, and this means ransomware authors must be awake to the importance of optimising their attacks and avoiding detection for as long as possible.
With this in mind, said Sophos, in recent months cyber criminals appear to be taking a keen interest in how network and endpoint security products detect and block malicious activity.
Click to expand...

guest · Dec 23, 2019

2020 Predictions: Ransomware
December 23, 2019
https://www.scmagazine.com/home/security-news/ransomware/2020-predictions-ransomware/

Morgan Wright, Chief Security Advisor, SentinelOne
The next ransomware attacker jackpot. We’ve seen countless attacks on public school districts and higher ed providers in 2019 which will likely continue, but I expect research institutes to increasingly be in the crosshairs in the coming year.

Dr. Srinivas Mukkamala, CEO, RiskSense
Ransomware will continue to be the growth driver in cyber-crime. The reason is simple, it’s the shortest distance between investment and revenue for its perpetrators. Unlike, identity theft, crypto-currency theft, or bank fraud, ransomware is a fast, cheap, and effective method of extracting fees from victims.

Sharon Reynolds, CIO, Omnitracs
In addition to an increase in ransomware and business email compromise, in 2020 we will also begin to witness an increase in API extortion. Many businesses offering SaaS and IT solutions have multiple open API’s, which puts them at risk. [...]
Click to expand...

Log in or Sign up

SophosLabs surveys the threat landscape for 2020 trends

guest Guest

guest Guest

Log in or Sign up

SophosLabs surveys the threat landscape for 2020 trends

guest Guest

guest Guest

Useful Searches