CYFIRMA, a leading cyber-threat visibility and intelligence analytics platform company, released Cyber-threat predictions for 2020
Summary
Hackers have gained momentum in finding new avenues to attack industries and nations as IT systems remained vulnerable with software programs and applications that are outdated, poorly configured and laden with weaknesses. Hackers will recycle and reuse existing attack vectors for new cyber-attacks: Entry of new nations such as Vietnam, Iran, Brazil and Spain to cyberwarfare will create new complexities for cyber defenders. Based on CYFIRMA’s research, hacking groups from these nations are employing low-cost modus operandi by reusing old vulnerabilities and existing malwares to make quick gains in furthering their state-sponsored agenda. CYFIRMA’s intelligence observed a suspected Vietnamese state-sponsored group, OceanLotus, exploiting old vulnerabilities and using existing malwares to attack opinion leaders, influencers, banks, media houses, real estate agencies and foreign enterprises across several countries including China, Laos, Thailand and Cambodia. Use of automated systems especially during reconnaissance phase of cyberattack to collect vulnerable targets is the new trend; - Increased usage of machine learning and AI technologies by hackers has resulted in attempts at creating self-generating malware and exploits; - Autonomous critical infrastructure, digitalization of ecosystems and NextGen industrial controls will constitute a growing attack surface that cyber attackers could leverage to inflict significant damage; - Industry 4.0 coupled with predictive supply chain, digitization and interconnected entities will provide radical new opportunities for cybercriminals as risks posed by cyber-threats will become extensive and expensive to manage; - New attack vectors like identity theft, fraudulent transactions, asset theft, impersonation, injection of malicious code, bypassing the onboarding and off-boarding of accounts and fictitious applications will be used by cyber-criminals to attack financial institutions, cryptocurrency exchanges, trading platforms and retail organizations; - Cloud containers will be targeted by hackers to potentially access client’s data and IT assets.