#STMicroelectronics #Wisebatt #Salesforce

There are attacks targeting telecommunications and retail more than doubled in the past year. A report highlights an explosion in adversary activity, both in volume and velocity. CrowdStrike’s threat hunters tracked a 60% increase in attempted intrusions spanning all industry verticals and geographic regions. The report also showcases a significant drop in average breakout time – the time it takes for an intruder to begin moving laterally outside of the initial beachhead to other systems in the network – of just one hour 32 minutes, a threefold decrease from 2020. These sobering statistics show how threat actors are constantly adapting tactics, techniques, and procedures to accelerate their march toward their objectives.



The report further highlights:

Adversaries have moved beyond malware. They are using increasingly sophisticated and stealthy techniques tailor-made to evade detections.

China, North Korea and Iran were the most active state-sponsored groups. The report reveals the majority of targeted intrusion activity from adversary groups were based out of China, North Korea, and Iran.



A massive surge in interactive intrusion activity targeting the telecommunications industry. This activity spans all major geographic regions and has been tied to a diverse range of adversaries.



WIZARD SPIDER was the most prolific cybercriminal. In fact, this group was seen in nearly double the number of attempted intrusions than any other eCrime group. WIZARD SPIDER is behind targeted operations using Ryuk and, more recently, Conti ransomware.



A 100% increase in instances of cryptojacking in interactive intrusions year-over- year, correlating with increases in cryptocurrency prices.



Access Brokers had a banner year. eCrime actors who specialize in breaching networks to sell that access to others played a growing.