Email Attacks Doubled In 2023

The leader cyber security  firm Acronis has released findings of its regular cyber threats report for the second half of 2023 called Acronis Cyberthreats Report H2 2023.  Notably, it uncovers the rise of Generative AI (Gen-AI) systems to create malware and orchestrate serious cyber attacks.

The report provides an in-depth analysis and prescriptive outlook on key security issues and prevalent cyber-threats worldwide.

By leveraging data collected from over 1,000,000 unique endpoints across 15 key countries, the findings conclude that AI-enhanced phishing affected over 90% of organisations and contributed to a 222% surge in email attacks in 2023 as compared to the second half of 2022.

Ransomware variants have decreased, yet the most effective attack vector are still causing companies across the globe to lose both their data and their money. In particular, Acronis identifies  the lack of strong security solutions which should be detecting the exploitation of zero-day vulnerabilities.

Organisations are falling victim to attacks due to the delay in patching vulnerable software which allows threat actors to gain domain administrative rights, uninstall security tools and infiltrate sensitive information. 

“There’s a disturbing trend being recognised globally where bad actors continue to leverage ChatGPT and similar generative AI systems to increase cyberattack efficiency, create malicious code, and automate attacks,” observed Candid Wüest, Acronis VP of Product Management. “Now, more than ever, corporations need to prioritise comprehensive cyber protection solutions to ensure business continuity.” he said.

These IT resources are allies to businesses who seek robust IT infrastructure and sound cyber security but because they centralise services to numerous businesses, from SMBs to large corporations; the scaling efficiencies that make them a business asset also make them a single point of failure where cyber criminals can exploit multiple entities through a single attack.

The report notes how more advanced tactics like supply chain attacks, AI-driven attacks and state-sponsored incursions are likely to intensify. MSPs should brace themselves for threats unique to their operations, including "island hopping," in which attackers use an MSP's infrastructure to attack clients, as well as "credential stuffing," which exploits an MSP's broad access to systems.

Key findings and themes from the report include:

Global Threat Landscape

  • Singapore, Spain, and Brazil emerged as the most targeted focus countries for malware attacks in Q4 2023.
  • Acronis blocked nearly 28 million URLs at the endpoint in Q4 2023, reflecting a 36% decrease compared to Q4 2022.
  • 33.4% of received emails were identified as spam, with 1.5% containing malware or phishing links.
  • The average lifespan of a malware sample in the wild is 2.1 days.
  • In Q4 2023, 1,353 ransomware cases were explicitly mentioned, with notable contributions from LockBit, Play, ALPHV and the active Toufan group.

Cyber Security Trends H2 2023

  • Ransomware remains a major threat to large and medium-sized businesses, impacting critical sectors such as government and health care.
  • Data stealers are the second most prevalent threat, contributing to most data breaches.
  • The use of generative AI systems, including ChatGPT, for launching cyberattacks and creating malicious content is on the rise.

Ransomware Trends

  • Known ransomware gangs in 2023 include LockBit, Cl0P, BlackCat / ALPHV, Play, and 8Base.
  • The ALPHV gang, whom the FBI targeted in December 2023, breached over 1,000 entities, demanded over $500 million, and received over $300 million in ransom payments.
  • Regardless of a decrease in ransomware variants, businesses continue to suffer data and financial losses.

Attacks on MSPs Are Increasing

  • Attacks on managed service providers (MSPs) continue, with a recent high-profile breach affecting multiple US (United States) government agencies.
  • Microsoft cloud email account vulnerabilities led to the compromise of 60,000 emails from 10 US State Department accounts.

Phishing & Amail Attacks Remain The Main Attack Vectors

  • The total number of email-based attacks detected in 2023 increased by 222%.
  • Organisations experienced a 54% increase in the number of attacks per organisation.
  • 91.1% of organisations faced AI-enhanced phishing attacks.

Cyber Criminals Embrace Malicious AI Tools 

  • Cyber criminals are leveraging malicious AI tools, including WormGPT, FraudGPT, DarkBERT, DarkBART and ChaosGPT.
  • The public release of ChatGPT has increased the use of generative AI for cyberattacks.

Bad actors continue to profit from these activities and are leveraging AI-enhanced techniques to create more convincing phishing schemes, guaranteeing that this problem will continue to plague businesses.

Acronis       Image: Unsplash

You Might Also Read: 

BEC Attacks: Trends & Predictions For 2024:

DIRECTORY OF SUPPLIERS - Email Security:

___________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Cybercrime Hit 1.5m UK Businesses In 2023
Russian Military Botnet Dismantled »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

AlgoSec

AlgoSec

The AlgoSec platform enables the world’s most complex organizations to gain visibility, reduce risk and process changes at zero-touch across the hybrid network.

Bastille

Bastille

Bastille’s patented software and security sensors bring visibility to devices emitting radio signals (Wi-Fi, cellular, IoT) in your organization.

D-Fence

D-Fence

D-Fence high availability security service protects corporate email communication, the company and it's employee's against cyber threats.

Adlink Technology

Adlink Technology

ADLINK is a leading provider of embedded computing products and services for applications including IoT and industrial automation.

Picus Security

Picus Security

Huge gaps often exists between the "perceived"​ and "actual"​ IT security level of an organization. Picus Security continuously assesses security controls and reveals deficient ones before hackers do.

V-Key

V-Key

V-Key is a global leader in software based digital security, providing solutions for mobile identity, authentication, authorization, and mobile payments for major banks.

Verodin

Verodin

Verodin is a business platform that provides organizations with the evidence needed to measure, manage and improve their cybersecurity effectiveness.

QI ANXIN Technology Group

QI ANXIN Technology Group

QI ANXIN specializes in serving the cybersecurity market by offering next generation enterprise-class cybersecurity products and services to government and businesses.

Ridge Security

Ridge Security

Ridge Security enables enterprise and web application teams, ISVs, governments, education, DevOps, anyone responsible for ensuring software security to affordably and efficiently test their systems.

SGTech

SGTech

SGTech is the leading trade association for Singapore's tech industry, offering focused support and development to both strategic and emerging sectors in the industry.

Prophaze Technologies

Prophaze Technologies

Prophaze enable organizations and SaaS providers to improve their web application cybersecurity and reduce costs through AI automation.

Tarlogic

Tarlogic

Tarlogic works to protect and defend your security with the highest quality technical team with next generation solutions to achieve the best protection.

AgilePQ

AgilePQ

AgilePQ visibly secures IoT devices worldwide to protect the privacy, safety, and well-being of all people.

Proaxiom

Proaxiom

Proaxiom are focused on erasing cyber driven panic paralysis for Small and Medium Enterprises through brilliant cyber technologies which drive productivity and support growth.

EmberOT

EmberOT

EmberOT is at the forefront of operational technology (OT) security, offering cutting-edge solutions designed to protect critical infrastructure within energy, utilities, and manufacturing sectors.

Assura

Assura

Assura provides innovative cybersecurity advisory and managed services to all industries including government, healthcare, financial, manufacturing, and transportation sectors.