WEF Report Confirms Cyber Attack Risk Is Growing Worldwide

Cybercattacks represent the greatest risk in six out of ten of the top economies in the world and not just in the United States but world-wide. Attacks are growing in every business sector and all organisations need to manage cyber risks and threats. 

A new report from the World Economic Forum discusses form-jacking, crypto-jacking, ransomware like LockerGoga and other cyber-attacks of which CEOs around the globe are starting to become more aware. 

These different types of attacks break out as malicious code designed to steal monetary or physical assets from consumers and businesses. They’re also becoming more serious as time passes by. They cost companies around 12% more in damages in 2018 than in 2017. This should force executives to pay more attention to technical experts on staff during board meetings.

According to this report, India is the only country listed in the top seven global economies that has dropped cyber-attacks off of their top five risks. What is particularly troubling is that the attack went unreported for months and that the tools and techniques used by the malicious actors consisted of reused tools from 2015 and 2017 attacks. A phishing attack laid the groundwork for bad actors to establish a foothold. These attackers then took control of internal systems and used open-source tools to build upon and sustain their access.

Form-Jacking
With the boom in online marketplaces, it’s no surprise the cyber-attacks have risen in prevalence. Symantec in 2018 identified form-jacking as the process of intercepting payment forms and collecting data on retail websites. The issue spiked between August 2018 and September 2018 when Symantec reported on around 248,000 form-jacking attempts. In an attempt to determine patterns in the attacks, Symantec pulled 1,000 instances over a course of three days and discovered 57 websites were attacked across those attempts. The attacked sites were located all over the world and ranged in size from small businesses to global retailers.

One of the bigger hacking groups that uses form-jacking to gain information is a group called Magecart. In 2018, the group launched a campaign against British Airways, Ticketmaster, Feedify and Newegg. 

Interestingly enough, the lure to these companies was again the presence of a lot of third-party service providers. The reason for this is shared network infrastructure points where a third-party vendor may offer a weaker defense than the intended organisation. Companies who use services provided by third-party vendors are often forced to allow some network sharing.


A major example of this was evident in the Target breach of 2013. Target relied on a third-party company to manage heating, ventialtion a nd air-conditioning (HVAC) services. The security or training advisement was weaker on behalf of the third party. However, there was a linked portal allowing that vendor to access Target’s internal system. It could be that this attack’s ideology stems from successes in previous major security breaches of the past. 

When security requirements are a shared responsibility, more points of vulnerability often present themselves.

Crypto Jacking Malware
Crypto jacking was another point of note from the article as a rising cyber threat in the business realm. This attack is unique in its purpose. Machines that are breached are not sought out for their stored data but for their computing resources to aid in the mining of crypto currency. 

The hack is performed in a traditional manner by running malicious code on the target device or using a web application infection to load mining software on the victim’s machine. This attack vector should be troubling to major businesses worldwide, as hackers have begun to view these attacks as having more reward than risk.

As an alternative to crypto jacking, hacker groups can simply demand payments in cryptocurrency using ransomware. Crypto-malware is not a guaranteed payoff, and companies are increasingly embracing the idea of backing up data regularly and ensuring backup sites are ready to go should a breach take place. 

LockerGoga Ransomware
For the many businesses in 2019, an important cyber boogeyman was a ransomware family identified as LockerGoga. This was especially true for industrial and manufacturing firms with large stakes on the table. This year, French, Norwegian and American companies faced down this ransomware strain. FireEye told Wired that it has dealt with five or more attacks within the industrial and manufacturing sector.

What is most alarming about LockerGoga is the fact that there is no definitive determination on how hackers are initially gaining access to victim’s machines. 

Attackers seem to have credentials that grant them network access and hey can gain these details through traditional efforts by implementing social engineering tactics, purchasing credentials from hacker markets and phishing. The reason for concern to the industrial sector is the physical risks associated with that sector. Limiting control of systems and subsystems in that industry could have a direct impact for workers’ lives and environmental variables. From the reports provided by different regions, it seems that money is not always the biggest motivator for cyber-attacks. At the national level in each of these economies, political motives may have been present, as well. 

As the world moves to a more globalised economy working with each other, politicians’ relationships play a large part. Corrupt state-sponsored hacking groups with the power to infiltrate adversary federal governments may use that power to launch influence elections or even the economy in some cases. 

This can be done by holding independent businesses hostage in extortion-based cyberattacks or through social media marketing campaigns.

US federal organisations have been investigating Russian actors for “meddling” in the 2016 United States presidential election and that fear alone has changed how organisations responsible for voter-processes are preparing the presidential elections coming in 2020. Looking abroad, Canada could very well see significant cyber influence from foreign parties in their 2019 federal election. 

The problem stretches to Europe, as well, with public interference occurring in Germany, Finland, Croatia and the Czech Republic.

Some key findings from the report are similar to the main points of 2018 study. For that publication, 141 economies had the chance to choose among 30 options as the most significant risks facing them. From these 30 risks, 48 countries listed cyberattacks within their top five risks. Globally, cyberattacks rose from the fifth highest risk in 2018 to the second highest risk in 2019, topping national governance failures, unemployment and energy price shock.

According to the report, the top seven economies are China, France, Germany, Japan, India, the United Kingdom and the United States, not in that order. Six of the seven nations reported cyberattacks as one of their top five risks. Many of the solutions to the problems outlined by the report come down to being informed.

It is estimated that somewhere around 90% of all cyber shortcomings stem from a lack of knowledge and human error. 

For that other 10%, they should consider deploying detection devices to monitor traffic for anomalies in behavior, firewalling and abiding by common cyber security practices. 

Even for the tools mentioned that operate in the background at the packet level, even the best malware cannot always obfuscate activity. Smart detection devices in place can alert security teams to network maliciousness and aid in prevention and/or recovery from big data breaches.

For free Cyber training advice and information please contact Cyber Security Intelligence

World Economic Forum:        Tripwire:   

You Might Also Read:

World Economic Forum Cyber Risks Report:

 

« Cyber Insurance Might Actually Encourage Attacks
Artificial Intelligence & The Ethics Of War »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Jooble

Jooble

Jooble is a job search aggregator operating in 71 countries worldwide. We simplify the job search process by displaying active job ads from major job boards and career sites across the internet.

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

ON-DEMAND WEBINAR: What Is A Next-Generation Firewall (and why does it matter)?

Watch this webinar to hear security experts from Amazon Web Services (AWS) and SANS break down the myths and realities of what an NGFW is, how to use one, and what it can do for your security posture.

XYPRO Technology

XYPRO Technology

XYPRO is the market leader in HPE Non-Stop Security, Risk Management and Compliance.

CSI Consulting Services

CSI Consulting Services

Get Advice From The Experts: * Training * Penetration Testing * Data Governance * GDPR Compliance. Connecting you to the best in the business.

Cyber Security Supplier Directory

Cyber Security Supplier Directory

Our Supplier Directory lists 6,000+ specialist cyber security service providers in 128 countries worldwide. IS YOUR ORGANISATION LISTED?

Netsparker

Netsparker

Netsparker provide a web application security scanner to automatically find security flaws in your websites, web applications and web services.

Norton

Norton

NortonLifeLock is dedicated to helping secure the devices, identities, online privacy, and home and family needs of approximately 50 million consumers.

Quokka

Quokka

Quokka (formerly Kryptowire) is the source for mobile security and privacy solutions, staying steps ahead of the threat and delivering peace of mind.

Data Theorem

Data Theorem

Data Theorem is a leading provider in modern application security. Its core mission is to analyze and secure any modern application anytime, anywhere.

Neovera

Neovera

Neovera is a trusted provider of managed services including cyber security and enterprise cloud solutions, committed to delivering results through the innovative use of scalable enterprise-grade tech.

Componolit

Componolit

Componolit GmbH is a highly specialized company with a strong emphasis on trustworthy software, component-based systems and formal verification.

Motiv ICT Security

Motiv ICT Security

Motiv is the ICT security specialist that provides public and private sector organisations with IT security solutions and services to prevent cybercrime, data theft and data breaches.

Framatome

Framatome

Framatome Cybersecurity portfolio is directly inspired by its unique experience in nuclear safety for critical information systems and electrical systems design.

Kiteworks

Kiteworks

Kiteworks (formerly Accellion) creates a dedicated Private Content Network that ensures zero-trust private content protection and compliance.

Dope Security

Dope Security

Dope Security is a fly-direct Secure Web Gateway that eliminates the data center stopover architecture required by legacy providers, instead performing security directly on the endpoint.

Yotta Infrastructure Solutions

Yotta Infrastructure Solutions

Yotta Infrastructure, a Hiranandani group company, provide Datacenter Colocation and Tech Services such as Cloud services, Network & Connectivity, IT Security and IT Management services.

Randaemon

Randaemon

RANDAEMON’s mission is to create True Random Number Generators (TRNG) that are hardware-based and integrated into System-on-Chip.

TuxCare

TuxCare

TuxCare make Linux more secure. We take care of Linux so that organizations can use Linux to support environments that require high levels of Cybersecurity, stability, and availability.

Beyon Cyber

Beyon Cyber

Beyon Cyber offer a complete portfolio of advanced solutions & services for cyber security in Bahrain.

QPoint Technologies

QPoint Technologies

QPoint provides solutions and consulting in areas including software engineering, testing, cybersecurity, ICT, web, mobile, project management, and complex integration processes.

Softsource vBridge

Softsource vBridge

Softsource vBridge are an ICT systems integrator providing specialist technology solutions, professional services, technical expertise and data centre services.