Managing The Effects Of AI-Driven Cyber Attacks

Leading cyber protection firm, Acronis, has released the findings of its Mid-Year Cyberthreats Report, called From Innovation to Risk: Managing the Implications of AI-driven Cyberattacks. The is based on data captured from more than one million global endpoints, provides insight into the evolving cyber security landscape and uncovers the growing use of generative Artificial Intelligence (AI) systems, such as ChatGPT, by cyber criminals to craft malicious content and execute sophisticated attacks.

The biannual threat report highlights ransomware as the dominant risk to small and medium-sized businesses. And while the number of new ransomware variants continues to decline, ransomware attacks' severity remains significant. 

Equally concerning is the growing prominence of data stealers, who leverage stolen credentials to gain unauthorised access to sensitive information. “The volume of threats in 2023 has surged relative to last year, a sign that criminals are scaling and enhancing how they compromise systems and execute attacks,” said Candid Wüest, Acronis VP of Research. “To address the dynamic threat landscape, organisations need agile, comprehensive, unified security solutions that provide the necessary visibility to understand attacks, simplify context, and provide efficient remediation of any threat, whether it may be malware, system vulnerability, and everything in between.”

According to the report's findings, phishing is the primary method criminals leverage to unearth login credentials. In the first half of 2023 alone, the number of email-based phishing attacks has surged 464% when compared to 2022. 

Over the same frame, there has also been a 24% increase in attacks per organisation. In the first half of 2023, Acronis-monitored endpoints observed a 15% increase in the number of files and URLs per scanned email. Cyber criminals have also tapped into the burgeoning large language model (LLM)-based AI market, using platforms to create, automate, scale, and improve new attacks through active learning.  

The Cyber Attack Landscape Is Evolving 

Cyber criminals are becoming more sophisticated in their attacks, using AI and existing ransomware code to drill deeper into victims’ systems and extract sensitive information. AI-created malware is adept at avoiding detection in traditional antivirus models and public ransomware cases have exploded relative to last year. 

Acronis-monitored endpoints are picking up valuable data about how these cyber criminals operate and recognises how some attacks have become more intelligent, sophisticated, and difficult to detect.

Drawing from extensive research and analysis, key findings from the Report include:    

  • Acronis blocked almost 50 million URLs at the endpoint in Q1 2023, a 15% increase over Q4 2022. 
  • There were 809 publicly mentioned ransomware cases in Q1 2023, with a 62% spike in March over the monthly average of 270 cases.
  • In Q1 2023, 30.3% of all received emails were spam and 1.3% contained malware or phishing links.  
  • Each malware sample lives an average of 2.1 days in the wild before it disappears. 73% of samples were only seen once.
  • Public AI models are proving an unwitting accomplice for criminals looking for source code vulnerabilities, creating attacks and developing fraud prevention-thwarting attacks like deep fakes. 

 Cyber criminal gangs phish to acquire credentials, extract data and dollars, of note:    

  • Phishing remained the most popular form of stealing credentials, making up 73% of all attacks. Business email compromises (BECs) were second, at 15%.
  • The LockBit gang was responsible for major data breaches.
  • Clop breached a mental health provider’s system, affecting the personal and HIPAA-covered data of more than 783,000 individuals.
  • BlackCat stole more than 2TB of secret military data, which included personal information of employees and customers, from an Indian industrial manufacturer.
  • Vice Society compromised 1,200 servers and the personal information of 43,000 students, 4,000 academic staff and 1,500 administrative staff at the University of Duisburg-Essen in Germany. 

Breaches Demonstrate Major Security Concerns 

Traditional cybersecurity methods and lack of action let attackers in, the report shares:   

  • There is a lack of strong security solutions in place that can detect zero-day vulnerability exploitations.
  • Organisations often fail to update vulnerable software in a timely manner, long after a fix becomes available.  
  • Linux servers face inadequate protection against the cyber criminals who are increasingly going after them.  
  • Not all organisations follow proper data backup protocol, including the 3-2-1 rule.

With these trends in mind, Acronis emphasises the need for proactive cyber protection measures. 

A sound cyber security posture requires a multi-layered solution that combines anti-malware, EDR, DLP, email security, vulnerability assessment, patch management, RMM, and backup capabilities. 

Leveraging an advanced solution that combines AI, machine learning, and behavioural analysis can help mitigate the risks posed by ransomware and data stealers. 

Through ongoing research, development, and collaboration with industry partners, Acronis is committed to empowering individuals and businesses by providing innovative solutions which protect against emerging cyberthreats. 

You Might Also Read: 

Is It Possible To Trust AI Decision-Making In Cybersecurity?:

_________________________________________________________________________________________

If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

 


Cyber Security Intelligence: Captured Organised & Accessible


 

 

« WatchGuard Expands Identity Protection Capabilities
Britain's Biggest Hospital Held To Ransom »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

Perimeter 81 / How to Select the Right ZTNA Solution

Perimeter 81 / How to Select the Right ZTNA Solution

Gartner insights into How to Select the Right ZTNA offering. Download this FREE report for a limited time only.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

FT Cyber Resilience Summit: Europe

FT Cyber Resilience Summit: Europe

27 November 2024 | In-Person & Digital | 22 Bishopsgate, London. Business leaders, Innovators & Experts address evolving cybersecurity risks.

WhiteHat Security

WhiteHat Security

WhiteHat’s products enable customers to “Hack Yourself First” so that they gain a greater understanding of the actual risk to their business.

QMS International

QMS International

QMS is one of the leading ISO certification bodies in the UK and serves clients worldwide.

US Cyber Command (USCYBERCOM)

US Cyber Command (USCYBERCOM)

USCYBERCOM conducts activities to ensure US/Allied freedom of action in cyberspace and deny the same to our adversaries.

Spanish National Cybersecurity Institute (INCIBE)

Spanish National Cybersecurity Institute (INCIBE)

INCIBE undertakes research, service delivery and coordination for building cybersecurity at the national and international levels.

Clavister

Clavister

Clavister is a network security vendor delivering a full range of network security solutions for both physical and virtualized environments.

IDpendant

IDpendant

IDpendant offers a wide range of services, including authentication technology, client security products, single sign on systems, encryption solutions, card and mobile device management systems.

FTAPI Software

FTAPI Software

FTAPI SecuTransfer is a software solution for end-to-end encrypted data exchange of large and sensitive data with customers and partners.

Excelerate Systems

Excelerate Systems

Excelerate Systems is a leading provider of IT services with a focus on Big Data, Cloud Services and Security.

NFIR

NFIR

NFIR is a specialist in the field of cyber security incident response and digital forensics.

Data Theorem

Data Theorem

Data Theorem is a leading provider in modern application security. Its core mission is to analyze and secure any modern application anytime, anywhere.

Asia Center of Excellence for Smart Technologies (ACES)

Asia Center of Excellence for Smart Technologies (ACES)

ACES is a one-stop competency center and incubator for the development of Industry 4.0 and associated technologies including cybersecurity, robotics, IoT and Big Data.

DataFleets

DataFleets

DataFleets is a privacy-preserving data engine that unifies distributed data for rapid access, agile analytics, and automated compliance.

Audea

Audea

Audea is a consultancy firm specialising in cybersecurity, risk and compliance. We provide professional services addressing all areas of Cybersecurity and GRC.

Cloud Range

Cloud Range

Cloud Range provides cybersecurity teams with access to the world's leading cyber range platform, eliminating the need to invest in costly cyber range infrastructure.

Cognna

Cognna

Cognna's innovative platform is designed to empower you and your team, providing the tools you need to detect, prevent, and resolve threats with ease.

Cyber Intell Solution (CIS)

Cyber Intell Solution (CIS)

Cyber Intell Solution provide expert consulting, specialized products, and tailored operational services to governmental and corporate industry worldwide.

Thero6

Thero6

Thero6 develop dynamic financial analysis algorithms that help prevent coin collapses and theft of cryptocurrency funds by identifying the transaction absolutely throughout the chain.