FortiGuard Labs predicts the convergence of advanced persistent threat methods with cybercrime
"All of this means cyber risk continues to escalate, and that CISOs need to be just as nimble and methodical as the adversary. Organizations will be better positioned to protect against these attacks with a cybersecurity platform integrated across networks, endpoints, and clouds to enable automated and actionable threat intelligence, coupled with advanced behavioral-based detection and response capabilities," Derek Manky added.
Fortinet® (NASDAQ: FTNT), a global leader in broad, integrated, and automated cybersecurity solutions, recently unveiled predictions from the FortiGuard Labs global threat intelligence and research team about the cyberthreat landscape for the next 12 months and beyond. From quickly evolving Cybercrime-as-a-Service (CaaS)-fueled attacks to new exploits on nontraditional targets like edge devices or online worlds, the volume, variety, and scale of cyberthreats will keep security teams on high alert in 2023 and beyond. Highlights of the predictions can be found below, but for a more detailed view of the predictions and key takeaways for CISOs, read our blog.
1) Success of RaaS is a preview of what is to come with CaaS
Given cybercriminal success with Ransomware-as-a-Service (RaaS), a growing number of additional attack vectors will be made available as a service through the dark web to fuel a significant expansion of Cybercrime-as-a-Service. Beyond the sale of ransomware and other Malware-as-a-Service offerings, new a la carte services will emerge. CaaS presents an attractive business model for threat actors. With varying skill levels they can easily take advantage of turnkey offerings without investing the time and resources up front to craft their own unique attack plan. And for seasoned cybercriminals, creating and selling attack portfolios as-a-service offers a simple, quick, and repeatable payday. Going forward, subscription-based CaaS offerings could potentially provide additional revenue streams. In addition, threat actors will also begin to leverage emerging attack vectors such as deepfakes, offering these videos and audio recordings and related algorithms more broadly for purchase.
One of the most important methods to defend against these developments is cybersecurity awareness education and training. While many organizations offer basic security training programs for employees, organizations should consider adding new modules that provide education on spotting evolving methods such as AI-enabled threats.
2) Reconnaissance-as-a-service models could make attacks more effective
Another aspect of how the organized nature of cybercrime will enable more effective attack strategies involves the future of reconnaissance. As attacks become more targeted, threat actors will likely hire "detectives" on the dark web to gather intelligence on a particular target before launching an attack. Like the insights one might gain from hiring a private investigator, Reconnaissance-as-a-Service offerings may serve up attack blueprints to include an organization's security schema, key cybersecurity personnel, the number of servers they have, known external vulnerabilities, and even compromised credentials for sale, or more, to help a cybercriminal carry out a highly targeted and effective attack. Attacks fueled by CaaS models means stopping adversaries earlier during reconnaissance will be important.
Luring cybercriminals with deception technology will be a helpful way to not only counter RaaS but also CaaS at the reconnaissance phase. Cybersecurity deception coupled with a digital risk protection (DRP) service can help organizations know the enemy and gain advantage.
3) Money laundering gets a boost from automation to create LaaS
To grow cybercriminal organizations, leaders and affiliate programs employ money mules who are knowingly or unknowingly used to help launder money. The money shuffling is typically done through anonymous wire transfer services or through crypto exchanges to avoid detection. Setting up money mule recruitment campaigns has historically been a time-consuming process, as cybercrime leaders go to great lengths to create websites for fake organizations and subsequent job listings to make their businesses seem legitimate. Cybercriminals will soon start using machine learning (ML) for recruitment targeting, helping them to better identify potential mules while reducing the time it takes to find these recruits. Manual mule campaigns will be replaced with automated services that move money through layers of crypto exchanges, making the process faster and more challenging to trace. Money Laundering-as-a-Service (LaaS) could quickly become mainstream as part of the growing CaaS portfolio. And for the organizations or individuals that fall victim to this type of cybercrime, the move to automation means that money laundering will be harder to trace, decreasing the chances of recovering stolen funds.
Looking outside an organization for clues about future attack methods will be more important than ever, to help prepare before attacks take place. DRP services are critical for external threat surface assessments, to find and remediate security issues, and to help gain contextual insights on current and imminent threats before an attack takes place.
4) Virtual cities and online worlds are new attack surfaces to fuel cybercrime
The metaverse is giving rise to new, fully immersive experiences in the online world, and virtual cities are some of the first to foray into this new version of the internet driven by augmented reality technologies. Retailers are even launching digital goods available for purchase in these virtual worlds. While these new online destinations open a world of possibilities, they also open the door to an unprecedented increase in cybercrime in unchartered territory. For example, an individual’s avatar is essentially a gateway to personally identifiable information (PII), making them prime targets for attackers. Because individuals can purchase goods and services in virtual cities, digital wallets, crypto exchanges, NFTs, and any currencies used to transact offer threat actors yet another emerging attack surface. Biometric hacking could also become a real possibility because of the AR and VR-driven components of virtual cities, making it easier for a cybercriminal to steal fingerprint mapping, facial recognition data, or retina scans and then use them for malicious purposes. In addition, the applications, protocols, and transactions within these environments are all also possible targets for adversaries.
Regardless of work-from-anywhere, learning-from-anywhere, or immersive experiences-from-anywhere, real-time visibility, protection, and mitigation is essential with advanced endpoint detection and response (EDR) to enable real-time analysis, protection, and remediation.
5) Commoditization of wiper malware will enable more destructive attacks
Wiper malware has made a dramatic comeback in 2022, with attackers introducing new variants of this decade-old attack method. According to the 1H 2022 FortiGuard Labs Global Threat Landscape report, there was an increase in disk-wiping malware in conjunction with the war in Ukraine, but it was also detected in 24 additional countries, not just in Europe. Its growth in prevalence is alarming because this could be just the start of something more destructive. Beyond the existing reality of threat actors combining a computer worm with wiper malware, and even ransomware for maximum impact, the concern going forward is the commoditization of wiper malware for cybercriminals. Malware that may have been developed and deployed by nation-state actors could be picked up and re-used by criminal groups and used throughout the CaaS model. Given its broader availability combined with the right exploit, wiper malware could cause massive destruction in a short period of time given the organized nature of cybercrime today. This makes time to detection and the speed at which security teams can remediate paramount.
Using AI-powered inline sandboxing is a good starting point to protect against sophisticated ransomware and wiper malware threats. It allows real-time protection against evolving attacks because it can ensure only benign files will be delivered to endpoints if integrated with a cybersecurity platform.
What these attack trends mean for cybersecurity professionals
The world of cybercrime and the attack methods of cyber adversaries in general continue to scale at great speed. The good news is that many of the tactics they are using to execute these attacks are familiar, which better positions security teams to protect against them. Security solutions should be enhanced with machine learning (ML) and artificial intelligence (AI) so they can detect attack patterns and stop threats in real time. However, a collection of point security solutions is not effective in today’s landscape. A broad, integrated, and automated cybersecurity mesh platform is essential for reducing complexity and increasing security resiliency. It can enable tighter integration, improved visibility, and more rapid, coordinated, and effective response to threats across the network.
See also
Vietnamese firms attend IT, industrial expo in Germany
14:58 | 18/04/2023 Information technology
Import tax exemption to benefit domestic ICT industry
10:34 | 12/04/2023 Information technology
Vietnam, the Netherlands promote exports through digital environment
15:19 | 06/04/2023 Information technology
Ransomware top menace for enterprises in SEA
15:00 | 14/03/2023 Information technology
PM urges basic, comprehensive reform in digital transformation
06:00 | 06/03/2023 Digitalization
Vietnam’s AI leadership status improving
06:00 | 04/03/2023 Information technology
See more news
Managed security provides IT talent gap solution for businesses in SEA
16:34 | 30/01/2023 Information technology
Top 10 ICT developments in 2022
06:00 | 11/01/2023 Information technology
Cybersecurity resilience emerges as top priority for Vietnamese organizations
15:39 | 05/01/2023 Information technology
ETH Vietnam: The first hub for blockchain community to build and learn together
16:23 | 17/11/2022 Information technology
Wolfoo product sets certificated as standard content
16:15 | 01/11/2022 Make in Vietnam
Base.vn received the International Award ASOCIO 2022
18:05 | 31/10/2022 Make in Vietnam
Bkav, Excelpoint provide AIoT platform built on Qualcomm ecosystem
10:01 | 21/10/2022 Make in Vietnam
C.P. Vietnam’s HR digital transformation with SAP® SuccessFactors® Solution
21:18 | 13/05/2022 Digitalization
A “Make in Vietnam” communications programming platform
13:00 | 26/12/2021 Information technology
Vietnamese patents make imprints on international maps
06:00 | 22/05/2021 Digitalization
Seven strategic directions to lead the nation into a new era
17:04 | 05/11/2024 Infographic
WB, Switzerland help boost Viet Nam’s sustainable urban development
16:53 | 05/11/2024 Society
Finance ministry proposes extending environmental tax cut on fuel products in 2025
16:47 | 05/11/2024 Policy
Workshop looks to address environmental management issues in industrial areas
16:34 | 05/11/2024 Environment
PM visits President Ho Chi Minh relic site in Kunming
16:30 | 05/11/2024 News and Events
Multimedia
Seven strategic directions to lead the nation into a new era
17:04 | 05/11/2024 Infographic
Delicacy of Hà Nội’s autumn
11:29 | 04/11/2024 Lifestyle
Vietnam-Cuba traditional solidarity, special friendship
10:12 | 02/11/2024 Infographic
Vietnam expands FTA network
09:15 | 01/11/2024 Infographic
Vietnam – Qatar friendship and multifaceted cooperation
09:06 | 31/10/2024 Infographic
Finance ministry proposes extending environmental tax cut on fuel products in 2025
16:47 | 05/11/2024 Policy
NA deputies call for solutions to ensure the feasibility of drug prevention and control programme
17:33 | 03/11/2024 Policy
15th NA’s 8th session to further discuss legislative, inspection work next week
16:58 | 03/11/2024 Policy
Developing education, training to serve new era of nation: PM
09:57 | 03/11/2024 Policy
Efforts to bring electricity to remote villages of Ha Giang Province
15:15 | 04/11/2024 Energy
Vietnamese F&B industry works to catch up with green consumption trend
17:38 | 03/11/2024 Industry
PM calls for Qatar's support for energy development in Việt Nam
08:56 | 01/11/2024 Energy
Efforts made to create breakthrough in Vietnam's automobile industry
09:28 | 31/10/2024 Industry
Foxconn to invest US$80 million in Bắc Giang for chip manufacturing expansion
16:16 | 04/11/2024 Investment
Da Nang to invest additional 16 million USD into software park
17:19 | 03/11/2024 Investment
PM receives heads of leading investment firm, authority of Qatar
09:07 | 01/11/2024 Investment
Forum suggests suitable orientations for green development strategy in Lam Dong
15:44 | 31/10/2024 Investment
Krungsri proposes accelerating purchase of 50% of SHBFinance’s charter capital
15:46 | 05/11/2024 Finance-Banking
Finance ministry proposes two price management scenarios for year-end
10:11 | 04/11/2024 Finance-Banking
Banking sector prioritises support for import-export firms
16:35 | 02/11/2024 Finance-Banking
Smart Banking 2024 workshop and exhibition held
15:32 | 31/10/2024 Finance-Banking
Workshop looks to address environmental management issues in industrial areas
16:34 | 05/11/2024 Environment
More accurate forecasts at all levels needed to reduce coastal disaster risk
15:07 | 04/11/2024 Environment
Nearly-98-million-USD environment project inaugurated in Ninh Thuan
10:13 | 03/11/2024 Environment
Northern region to experience first cold weather of this winter
14:30 | 31/10/2024 Environment
Technology “key” to attract FDI
09:09 | 05/11/2024 Science - Technology
HCM City partners with Google for Education in digital transformation
14:47 | 04/11/2024 Science - Technology
Việt Nam develops 'purely Vietnamese' generative AI
09:45 | 01/11/2024 Science - Technology
Vietnam’s first semiconductor expo underway in HCM City
09:36 | 01/11/2024 Science - Technology
WB, Switzerland help boost Viet Nam’s sustainable urban development
16:53 | 05/11/2024 Society
VRA proposes over $7.2b for Lào Cai-Hà Nội-Hải Phòng-Quảng Ninh Railway project
09:22 | 05/11/2024 Society
Eastern section of $1.23b southern expressway will soon be opened for use
15:03 | 04/11/2024 Society
Vietnam aims to produce innovative medicines
14:53 | 04/11/2024 Society
190 businesses win Vietnam National Brand Award 2024
10:33 | 05/11/2024 Vietnamese Brands
Vietnamese AI firms have many chances of development
14:51 | 04/11/2024 Vietnamese Brands
Cooperatives play significant role in OCOP product development
14:45 | 04/11/2024 Vietnamese Brands
Cơ Tu ethnic’s farm produce debuts in supermarket system
09:08 | 31/10/2024 Vietnamese Brands
Calligraphy exhibition highlights literary masterpieces
10:53 | 05/11/2024 Culture
VN int’l fashion week Fall/Winter 2024 prepares to open
11:38 | 04/11/2024 Culture
Delicacy of Hà Nội’s autumn
11:29 | 04/11/2024 Lifestyle
$10-billion national target programme on cultural development officially proposed to parliament
18:02 | 02/11/2024 Culture
Time Out lists Vietnam among Top 5 Memorable Christmas Escapes in Asia
10:27 | 05/11/2024 Tourism
Foreign travellers' interest in northern regions still strong after typhoon
14:15 | 04/11/2024 Tourism
Ninh Bình Festival to boost historical heritages of VN’s former capitals
14:10 | 04/11/2024 Tourism
Halal tourism: tackling religious and cultural differences
17:57 | 02/11/2024 Tourism