12.03.2024 08:30:47 - Cyber Threat Surge: Trend Micro Blocks 160 billion Incidents in 2023
EQS Newswire / 12/03/2024 / 08:30 CET/CEST Ransomware detections fall 14% as alternative attack strategies evolve HONG KONG SAR - Media OutReach Newswire - 12 March 2024 - Trend Micro Incorporated (TYO: 4704; TSE: 4704) a global cybersecurity leader, today revealed a 10% annual increase in total threats blocked in 2023 and warned that attackers are using more advanced methods to target fewer victims with the potential for higher financial gains. To read a copy of the report, Calibrating Expansion: Annual Cybersecurity Threat Report, please visit: https:// www.trendmicro.com/vinfo/hk/security/research-and-analysis/threat-reports/roundup/ calibrating-expansion-2023-annual-cybersecurity-threat-report Jon Clay, VP of threat intelligence at Trend: "We're blocking more threats than ever before for our customers. But understand that adversaries showed a variety and sophistication of TTPs in their attacks, especially in defense evasion. As our report demonstrates, network defenders must continue to proactively manage risk across the entire attack surface today. Understanding the strategies favored by our adversaries is the foundation of effective defense." Trend Micro blocked 161 billion threats overall in 2023, compared to 82 billion threats five years ago. In 2023, threats blocked by email and web reputation dropped annually by 47% and 2%, respectively. Threats blocked by Trend's Mobile Application Reputation Service (-2%), Smart Home Network (-12%), and Internet of Things Reputation Service (-64%) also declined. However, there was a 35% annual increase in threats blocked under Trend's File Reputation Service (FRS). This could indicate that threat actors are choosing their targets more carefully. Instead of launching attacks on a wider range of users and relying on victims clicking on malicious links in websites and emails, they're targeting a smaller number of higher-profile victims with more sophisticated attacks. This might enable them to bypass early detection layers like network and email filters-which could explain the surge in malicious file detections at endpoints. Some other trends observed in the report include: . APT actors showed a variety and sophistication of their attacks against victims, especially arounddefense evasion tactics. . Email malware detection surged by 349% year-on-year (YoY), while malicious and phishing URL detectionsdeclined by 27% YoY - again highlighting the trend for more using malicious attachments in their attacks. . Business email compromise (BEC) detections increased 16% YoY. . Ransomware detections dropped 14% YoY. However, once again, the increase in FRS detections may indicatethat threat actors are getting better at evading primary detection via techniques such as Living-Off-The-LandBinaries and Scripts (LOLBINs/LOLBAs), Bring Your Own Vulnerable Driver (BYOVD), zero-day exploits, and AVtermination. . Linux and MacOS ransomware attacks were 8% of the overall ransomware detections. . There was an increase in remote encryption, intermittent encryption, EDR bypass using unmonitoredvirtual machines (VMs), and multi-ransomware attacks where victims were hit more than once. Adversaries haverecognized EDR as a formidable defense but are now utilizing bypass tactics to get around this technology. . Thailand and the US were the top two ransomware victim countries, with banking as the most affectedsector. . The top MITRE ATT&CK detections were defense evasion, command & control, initial access, persistence,and impact . Risky cloud app access was the top risk event detected by Trend's attack surface risk management (ASRM),recorded almost 83 billion times. . Trend's Zero Day Initiative discovered and responsibly disclosed 1914 zero-days, up 12% YoY. Theseincluded 111 Adobe Acrobat and Reader bugs. Adobe was the number one vendor for vulnerability reporting, and PDFswere the number one spam attachment type. . Windows applications were the top 3 vulnerabilities exploited through detections from our virtualpatches. . Mimikatz (used in data harvesting) and Cobalt Strike (used in Command & Control) continued to be thepreferred legitimate tools to abuse to aid criminal activity. In light of these findings, Trend advises network defenders to: . Work with trusted security vendors with a cybersecurity platform approach to ensure resources are notonly secured but also continuously monitored for new vulnerabilities. . Prioritize SOC efficiency by monitoring cloud applications carefully as they become more closelyintegrated into day-to-day operations. . Ensure all the latest patches/upgrades are applied to operating systems and applications. . Utilize comprehensive security protocols to safeguard against vulnerabilities, tighten configurationsettings, control application access, and enhance account and device security. Look to detect ransomware attacksearlier in the attack lifecycle by shifting left in defenses during initial access, lateral movement, or dataexfiltration stages. Hashtag: #trendmicro #cyberthreat #cybersecurity
The issuer is solely responsible for the content of this announcement. Trend Micro
Trend Micro, a global cybersecurity leader, helps make the world safe for exchanging digital information. Fueled by decades of security expertise, global threat research, and continuous innovation, Trend Micro's cybersecurity platform protects hundreds of thousands of organizations and millions of individuals across clouds, networks, devices, and endpoints. As a leader in cloud and enterprise cybersecurity, the platform delivers a powerful range of advanced threat defense techniques optimized for environments like AWS, Microsoft, and Google, and central visibility for better, faster detection and response. With 7,000 employees across 65 countries, Trend Micro enables organizations to simplify and secure their connected world. www.trendmicro.com.hk. News Source: Media OutReach
12/03/2024 Dissemination of a Financial Press Release, transmitted by EQS News. The issuer is solely responsible for the content of this announcement. Media archive at www.todayir.com
Image link: https%3a%2f%2frelease.media-outreach.com%2fRelease%2ftemplates%2fimages%2fsocialMedia%2fgeneric_link.png
Image link: https%3a%2f%2ftrack.media-outreach.com%2findex.php%2fWebView%2f284069%2f225647
Image link: https://eqs-cockpit.com/cgi-bin/fncls.ssp?fn=show_t_gif&application_id=1856159&application_name=news
END) Dow Jones Newswires
March 12, 2024 03:30 ET (07:30 GMT)