Fortinet® (NASDAQ: FTNT), a global leader in broad, integrated, and automated cybersecurity solutions, has announced the findings of its latest quarterly Global Threat Landscape Report. The research reveals that cybercriminals are constantly evolving the sophistication of their attacks — from continuing to exploit the vast insecurity of IoT devices, to morphing open source malware tools into new threats. For a detailed view of the Threat Landscape Indices for exploits, botnets, and malware, as well as some important takeaways for CISOs, read the blog. Highlights of the report follow:

 

• Exploit Index All-time High: According to the Fortinet Threat Landscape Index, cybercriminals remained hard at work even during a holiday season. After a dramatic start, the Exploit Index settled in the latter half of the quarter. While cyber adversary activity overall subsided slightly, the number of exploits per firm grew 10%, while unique exploits detected increased 5%. At the same time, botnets become more complex and harder to detect. Time for infection of botnets increased by 15%, growing to an average of nearly 12 infection days per firm. As cybercriminals employ automation and machine learning to propagate attacks, security organizations need to do the same to combat these advanced methods.

• Monitor the Monitoring Devices: The convergence of physical things and cybersecurity is creating an expanded attack surface, one that cybercriminals are increasingly targeting. Half of the top 12 global exploits targeted IoT devices, and four of the top 12 were related to IP-enabled cameras. Access to these devices could enable cybercriminals to snoop on private interactions, enact malicious onsite activities, or gain an entry point into cyber systems to launch DDoS or ransomware attacks. It is important to be aware of hidden attacks even in devices we use to monitor or provide security.

• Tools Open to Anyone: Open source malware tools are very beneficial to the cybersecurity community, enabling teams to test defenses, researchers to analyze exploits, and instructors to use real-life examples. These openware tools are generally available from sharing sites such as GitHub, and as these are available to anyone, adversaries can also access them for nefarious activities. They are evolving and weaponizing these malware tools into new threats, with ransomware comprising a significant number of them. An example where openware source code has been weaponized is the Mirai IoT botnet. An explosion of variants and activity continues to be catalogued since its release in 2016. For cybercriminals innovation continues to be the land of opportunity.

• The Proliferation of Steganography: Developments in steganography are bringing new life into an old attack type. While steganography is typically not used in high-frequency threats, the botnet Vawtrak made the list of “bursty” botnets. This demonstrates increased persistence for this attack type. In addition, during the quarter, malware samples were found to use steganography to conceal malicious payloads in memes passed along on social media. During the attack process after attempting to contact a C2 host, the malware looks for images in an associated Twitter feed, downloads those images, and looks for hidden commands within the images to propagate activity. This undercover approach demonstrates that adversaries continue to experiment in how they advance their malware while evading detection.

• Adware Infiltration: Adware is not just a nuisance, it has become a pervasive threat. Globally, adware sits at the top of the list of malware infections for most regions — exceeding one-quarter of all infection types for North America and Oceania, and almost one-quarter for Europe. With adware now found to be in published apps and posted on authorized app stores, this attack type can pose a serious threat especially to unsuspecting mobile device users.

• Keeping an Eye on Operational Technology: With the ongoing convergence of Information Technology (IT) and Operations Technology (OT), a year in review shows the relative change in prevalence and frequency in attacks targeting industrial control systems (ICS). Unfortunately, most attacks gained ground on both scales of volume and prevalence. A cyberattack that successfully targets an OT system, could result in devastating physical consequences to such things as critical infrastructure and services, the environment, and even human life.

 

The Need for Integrated and Automated Security
The threat data in this quarter’s report once again reinforces many of the threat prediction trends unveiled by the FortiGuard Labs global research team. To stay ahead of the ongoing efforts of cybercriminals, organizations need to transform their security strategies as part of their digital transformation efforts. A security fabric is needed to span the entire networked environment from the IoT endpoint to multi-clouds, to integrate each security element to address today’s growing threat environment, and to protect the expanding attack surface. This approach enables actionable threat intelligence to be shared at speed and scale across the entire distributed network, shrinks the necessary windows of detection, and provides the automated remediation required for today’s threats.

 

Report and Index Overview
The latest Fortinet Threat Landscape Report is a quarterly view that represents the collective intelligence of FortiGuard Labs, drawn from Fortinet’s vast array of global sensors during Q4 2018. Research data covers global and regional perspectives. Also included in the report is the Fortinet Threat Landscape Index (TLI), comprised of individual indices for three central and complementary aspects of that landscape which are exploits, malware, and botnets, showing prevalence and volume in a given quarter. The report also examines important zero-day vulnerabilities and infrastructure trends to add context about the trajectory of cyberattacks affecting organizations over time.

 

 

“The age of Cy-Phy” — the convergence of cybersecurity things and physical spaces — is here. Although the appeal of this convergence to our digital economy is almost sci-fi in terms of imagination, unfortunately, the cybersecurity risks are very real. Cybercriminals are closely watching and developing exploits that target this emerging digital convergence. Fundamental elements of cybersecurity, including visibility, automation, and agile segmentation, are more critical than ever to enable us to thrive in our Cy-Phy digital future, and to protect us against the malicious activities of our cyber adversaries,” Phil Quade, Chief Information Security Officer, Fortinet.

 

Additional Resources:

 

  • Read our blog for more information about this research or to access the full threat report.

 

  • View the Fortinet Threat Landscape Indices for botnets, malware, and exploits for Q4, 2018.

 

 

 

 

 

 

 


RECOMMENDED ARTICLE FOR TECHWORLD


 
Lenovo Introduces New Laptops for the ‘Modern Avid Gamer’
Techworld Date Posted: 17 August 2018 5:23 PM | 607 Views
Lenovo, a global leader in PCs and smart devices development, is launching two new laptops designed to meet the demands of the ‘modern avid gamers’. . See More
 
Lenovo Introduces New Laptops for the ‘Modern Avid Gamer’
Techworld Date Posted: 5:23 PM | 607 Views
Lenovo, a global leader in PCs and smart devices development, is launching two new laptops designed to meet the demands of the ‘modern avid gamers’. See More

 
Businesses Most at Risk from New Breed of Ransomware
Techworld Date Posted: 20 September 2017 9:35 AM | 393 Views
While ransomware has long been one of the main cyber threats to businesses, the past number of months have seen organizations more exposed than ever.Symantec's latest research paper on ransomwarehas found that businesses were.... See More
 
Businesses Most at Risk from New Breed of Ransomware
Techworld Date Posted: 9:35 AM | 393 Views
While ransomware has long been one of the main cyber threats to businesses, the past number of months have seen organizations more exposed than ever.Symantec's latest research paper on ransomwarehas found that businesses were...See More

 
Reward Yourself This Payday with Nokia Mobile’s Weekend Promos
Techworld Date Posted: 15 March 2019 4:47 PM | 106 Views
HMD Global, the home of Nokia phones, today announced its latest offering for Nokia fans, just in time for the payday weekends this March.. See More
 
Reward Yourself This Payday with Nokia Mobile’s Weekend Promos
Techworld Date Posted: 4:47 PM | 106 Views
HMD Global, the home of Nokia phones, today announced its latest offering for Nokia fans, just in time for the payday weekends this March.See More

 
Fortinet® Recommended in NSS Labs Data Center Security Gateway Test
Techworld Date Posted: 11 January 2018 9:16 AM | 591 Views
(NASDAQ: FTNT), the global leader in broad, integrated and automated cybersecurity solutions, today announced its results in the inaugural NSS Labs Data Center Security Gateway group test report. The testing revealed that Fortinet®’s FortiGate.... See More
 
Fortinet® Recommended in NSS Labs Data Center Security Gateway Test
Techworld Date Posted: 9:16 AM | 591 Views
(NASDAQ: FTNT), the global leader in broad, integrated and automated cybersecurity solutions, today announced its results in the inaugural NSS Labs Data Center Security Gateway group test report. The testing revealed that Fortinet®’s FortiGate...See More

 
Epson Works with Youth Groups to Drive Environmental Initiatives
Techworld Date Posted: 11 February 2019 2:08 PM | 114 Views
Epson has partnered with two youth-led organizations to help raise awareness on environmental issues as part of its 2018 to 2019 environmental initiatives, in line with its vision to contribute to the development of.... See More
 
Epson Works with Youth Groups to Drive Environmental Initiatives
Techworld Date Posted: 2:08 PM | 114 Views
Epson has partnered with two youth-led organizations to help raise awareness on environmental issues as part of its 2018 to 2019 environmental initiatives, in line with its vision to contribute to the development of...See More

 
The Lowdown on the Philippine ID System What Filipinos Need to Know
Techworld Date Posted: 21 September 2018 9:19 AM | 191 Views
The majority of modern nations implement a national ID system to achieve greater efficiency in the provision of services. Many of these nations, however, continue to struggle with the competing interest of personal privacy..... See More
 
The Lowdown on the Philippine ID System What Filipinos Need to Know
Techworld Date Posted: 9:19 AM | 191 Views
The majority of modern nations implement a national ID system to achieve greater efficiency in the provision of services. Many of these nations, however, continue to struggle with the competing interest of personal privacy....See More

 
Celebrate Better Connectivity and Security This Season with D-Link
Techworld Date Posted: 21 December 2018 3:58 PM | 122 Views
Gift loved ones this Christmas with reliable connection and security that last even beyond the holiday season. Leading network products supplier D-Link offers a range of Wi-Fi routers and security cameras. See More
 
Celebrate Better Connectivity and Security This Season with D-Link
Techworld Date Posted: 3:58 PM | 122 Views
Gift loved ones this Christmas with reliable connection and security that last even beyond the holiday season. Leading network products supplier D-Link offers a range of Wi-Fi routers and security camerasSee More

 
Power Mac Center Launches Lowered Service Rates, Enhanced Mail-In Repair Service
Techworld Date Posted: 7 November 2018 4:06 PM | 203 Views
In its commitment to provide genuine and hassle-free premium services to its customers, Power Mac Center’s Apple Authorized Service Provider is introducing lowered service repair rates and enhanced service offerings. . See More
 
Power Mac Center Launches Lowered Service Rates, Enhanced Mail-In Repair Service
Techworld Date Posted: 4:06 PM | 203 Views
In its commitment to provide genuine and hassle-free premium services to its customers, Power Mac Center’s Apple Authorized Service Provider is introducing lowered service repair rates and enhanced service offerings. See More

 
Epson Teams Up with DENR-EMB’s GREENducation PH for Its 1st EcoVision Short Film Competition for Students with an Extended Deadline
Techworld Date Posted: 23 January 2019 2:44 PM | 93 Views
Epson, in partnership with DENR-EMB (Environmental Management Bureau) and GREENducation Philippines, is extending the submission period for its 1st EcoVision Short Film Competition to February 19, 2019. . See More
 
Epson Teams Up with DENR-EMB’s GREENducation PH for Its 1st EcoVision Short Film Competition for Students with an Extended Deadline
Techworld Date Posted: 2:44 PM | 93 Views
Epson, in partnership with DENR-EMB (Environmental Management Bureau) and GREENducation Philippines, is extending the submission period for its 1st EcoVision Short Film Competition to February 19, 2019. See More

 
Digital Transformation (DX) Leads the Philippines Outsourcing Market to Hit US$500 Million by 2021
Techworld Date Posted: 24 August 2017 10:16 AM | 340 Views
The total outsourcing services spending in the Philippines is expected to exceed US$500 million by 2021, according to the latest forecast from theIDC APeJ Semiannual Services Tracker. Enterprises' Digital Transformation (DX) initiatives, as well.... See More
 
Digital Transformation (DX) Leads the Philippines Outsourcing Market to Hit US$500 Million by 2021
Techworld Date Posted: 10:16 AM | 340 Views
The total outsourcing services spending in the Philippines is expected to exceed US$500 million by 2021, according to the latest forecast from theIDC APeJ Semiannual Services Tracker. Enterprises' Digital Transformation (DX) initiatives, as well...See More


Power by

Download Free AZ | Free Wordpress Themes