The year of 2022 saw a 55% rise in cyberattacks compared to the year before, a new report from Trend Micro has claimed.
The company also said that during 2022, its products blocked 242% more malicious files, as threat actors targeted both consumers and organizations indiscriminately.
Trend Micro said threat actors most often gain initial access through remote services, before expanding their footprint through credential dumping. They are also very keen on maintaining presence on compromised endpoints (opens in new tab), as the company observed an 86% increase in malware designed to enable persistence.
Log4j still lingers
For the third year in a row, the company continues, the number of Zero Day Initiative (ZDI) advisories is hitting record numbers, reaching 1,706 in 2022. Trend Micro believes this is the result of a “rapidly expanding corporate attack surface”, as well as higher investments in automated analysis tools which are then able to find more bugs. In fact, the number of critical vulnerabilities discovered in 2022 was double that of 2021.
Two out of the top three CVEs reported in 2022 were related to Log4j, which still seems to be a major problem, years after its discovery.
Failed patches and “confusing” advisories are also on the rise, forcing organizations to spend more time and money to remedy potential problems. As a result, the firms are exposed to additional and unnecessary risk.
To tackle the increasingly volatile cybercrime problem, Trend Micro recommends businesses should regularly examine assets to determine their criticality, ensure that the cloud infrastructure is properly configured with security in mind, and prioritize updating software as soon as possible, to minimize the potential for exploitation.
For Jon Clay, VP of threat intelligence at Trend Micro, 2022 was “as a year when threat actors went ‘all-in' to boost profits”.
“A surge in backdoor detections is particularly concerning in showing us their success in making landfall inside networks. To manage risk effectively across a rapidly expanding attack surface, stretched security teams need a more streamlined, platform-based approach,” he concluded.
English
Arabic
Belarusian
Bengali
Bosnian
Bulgarian
Chinese (Simplified)
Croatian
Czech
Danish
Dutch
Estonian
Filipino
Finnish
French
Georgian
German
Greek
Gujarati
Hausa
Hebrew
Hindi
Hmong
Hungarian
Igbo
Indonesian
Italian
Japanese
Javanese
Kazakh
Korean
Kurdish (Kurmanji)
Kyrgyz
Lao
Latvian
Lithuanian
Macedonian
Malagasy
Norwegian
Persian
Polish
Portuguese
Punjabi
Romanian
Russian
Serbian
Slovak
Slovenian
Spanish
Swedish
Thai
Turkish
Ukrainian
Vietnamese
Yoruba