Cyber security experts Check Point Research (CPR) has revealed startling new statistics regarding the threat posed by attacks by hackers.
CPR latest report shows global weekly incidents of cyber crime roise by 7% in the first quarter of the year and that around 3% of all organisations have been hit by ransomware demands.
The study suggests:
• Global weekly attacks rose by 7% in Q1 2023 versus same quarter last year, with each organisation facing an average of 1,248 attacks per week
• Education/Research sector faced the highest number of attacks, rising to an average of 2,507 attacks per organisation per week, marking a 15% increase compared to Q1 2022
• APAC region experienced the highest YoY surge in weekly attacks, with an average of 1,835 attacks per organisation, marking a 16% increase
• 1 out of every 31 organisations worldwide experienced a ransomware attack every week
The report states: “While the volume of attacks has only risen marginally, we have witnessed several sophisticated campaigns from cybercriminals who are finding ways to weaponize legitimate tools for malicious gains.
“Recent examples include using ChatGPT for code generation that can help less-skilled threat actors effortlessly launch cyberattacks, Trojanizing 3CXDesktop app for a supply chain attack, and leveraging the critical unauthorized RCE Vulnerability in the “Microsoft Message Queuing” service (commonly known as MSMQ).
“The CPR team also discovered the fastest ever encrypting ransomware ever seen, all of which demonstrates how attackers are continuing their rampant crimes and never looking back.
“Despite the moderate increase, it’s important not to be complacent. CISOs need to focus on developing and implementing a security strategy that removes any blind-spots and weaknesses across the entire digital landscape.
“It could be a shadow IT development environment, remote access or email vector that provides an opportunity for a cyber breach.
“Do they have appropriate segmentation to avoid lateral movement and minimise an attack blast, and do they have access to an incident response service to minimise disruption and speed up recovery?
“Now more than any other period previously is the right time to consider a consolidated security approach for end-to-end preventative control, providing the board with assurance that you are fully protected from next generation attacks.”