Cybercriminals are using MSPs' own internal tools against
them - as per the Acronis Cyberthreats Report 2022
DUBAI, UAE, December 8, 2021 - Acronis, the global leader in
cyber
protection, today starts its #CyberFit Summit Dubai - the third
stop in the Acronis World Tour, an ongoing industry event series
dedicated to bringing cyber protection to businesses everywhere.
Marking the start of the event, the company has released its annual
Acronis Cyberthreats Report 2022, an in-depth review of
cybersecurity trends and threats worldwide. The report warns that
managed service providers (MSPs) are particularly at risk - having
more of their own management tools, such as PSA or RMM, used
against them by cybercriminals, and thus are becoming increasingly
vulnerable to supply chain attacks.
Supply-chain attacks on MSPs are particularly devastating, since
attackers gain access to both their business and clients - as seen
in the SolarWinds breach last year and the Kaseya VSA attack
earlier in 2021, one successful attack means crippling hundreds or
thousands of SMBs. The report also shows that during the second
half of 2021, only 20% of companies reported not having been
attacked - as opposed to 32% last year - indicating that attacks
are increasing in frequency across the board.
"The cybercrime industry is a well-oiled machine, using cloud
and machine intelligence to scale and automate their operations.
While the threat landscape continues to grow, we see that the main
attack vectors stay the same - and they still work," says Candid
Wuest, Acronis VP of Cyber Protection Research. "While
the attack surface is growing and 2022 will surely bring us
surprises, cyber protection automation remains the only path to
greater security, reduced risks, lower costs, and improved
efficiency."
Key trends of 2021 - and predictions for 2022
Beyond the growing efficiency of cybercriminals and the impact
on MSPs and small businesses, the Acronis Cyberthreats Report 2022
shows:
- Phishing remains the main attack vector. 94% of malware gets delivered by email - using social engineering techniques to trick users into opening malicious attachments or links, phishing has been topping the charts even before the pandemic. It still continues to grow rapidly: just this year, Acronis reported blocking 23% more phishing emails and 40% more malware emails in Q3, as compared with Q2 of the same year.
- Phishing actors develop new tricks, move to messengers. Now targeting OAuth and multifactor authentication tools (MFA), these new tricks allow criminals to take over accounts. To bypass common anti-phishing tools, they will use text messages, Slack, Teams chats and other tools for attacks such as business email compromise (BEC). One recent example of such an attack was the infamous hijacking of the FBI's own email service, which was compromised and started sending spam emails in November, 2021.
- Ransomware still the #1 threat - to big companies and SMBs alike. High-value targets include the public sector, healthcare, manufacturing, and other critical organizations. But despite some recent arrests, ransomware continues to be one of the most profitable cyberattacks these days. Cybercrime Magazine predicts ransomware damages will exceed $20 billion before the end of 2021.
- Cryptocurrency among the attackers' favourite playing cards. Infostealers and malware that swaps digital wallet addresses are the reality today. We can expect more such attacks waged directly against smart contracts in 2022 - attacking the programs at the heart of cryptocurrencies. Attacks against Web 3.0 apps will also occur more frequently, and new and increasingly sophisticated attacks, such as flash loan attacks, will allow attackers to drain millions of dollars from cryptocurrency pools.
Growing need for cyber protection in MEA: two data centers
opening
Overall, in terms of cybersecurity, this year was the worst on
record; not just for many organizations, but for many countries as
well - including the UAE, a country now pushing to fight the global
"cyber pandemic." And despite their best effort, as
Acronis' own recent survey shows, 25% of people in UAE still do
not use any cyber protection tools.
Malware attacks remain a global phenomenon, and every country
has to fight it. Reviewing the normalized malware detection in our
research, we saw countries like Taiwan, Singapore, China, and
Brazil with over a 50% detection rate. However, the Middle East and
Africa (MEA) region also ranks fairly high on the list, with the
UAE at 38%; South Africa at 36%; and Saudi Arabia at 29%.
We see similar statistics for blocked ransomware attacks: the
UAE ranked 33rd globally, responsible for 0.3% of all
global detections - a 63% increase from Oct 2021 - while South
Africa ranked 30th globally, responsible for 0.4% of all
detections - a 64% increase from October, 2021.
While ransomware attacks are clearly on the rise in MEA, the
high malware detection rates could mean that countries are paying
more attention to cyber protection by upgrading their detection
capabilities.
The Acronis #CyberFit Summit taking place as a hybrid event in
Dubai, UAE on December 8th─9th aims to help
local organizations and citizens build up their cyberdefences. The
platform engages world-class cybersecurity and industry experts,
and provides an in-depth look at how companies can enhance their IT
infrastructure capabilities - with a particular focus on MSPs, the
backbone of channel business.
Acronis is also using this platform to pre-announce the opening
of two data centers in Africa - Nigeria and South Africa - opening
in Q2 2022, helping to fulfill the company's ongoing plan of
building 110 data centres worldwide within two years.
Acronis Cyberthreats Report 2022
The full report provides in-depth insights into the top
cybersecurity and threat trends the CPOCs observed during the
second half of 2021; a review of malware families and related
statistics; a deep dive into ransomware's most dangerous groups;
the vulnerabilities that contribute to successful attacks; and
Acronis' security recommendations for 2022 and beyond. Check out
the findings for the first half of 2021 in our
Acronis Cyberthreats Report: Mid-year 2021.
You can download a copy of the full
Acronis Cyberthreats Report 2022 here.
Acronis #CyberFit Summit in Dubai, UAE
- Remote work is here to stay, and so are the increased levels of sophisticated cyberattacks - and so it's up to both companies and individuals to follow the best cyber protection practices available.
- If you are keen to learn more about cybersecurity pain points and available solutions for businesses, register now for the Acronis #CyberFit Summit World Tour 2021. One platform that allows you to:
- Attend result-focused virtual sessions for free and learn from world-class experts on cyber protection.
- Enhance your MSP business' cyber protection capabilities with advice from the top channel, cybersecurity, and industry experts.
- Hear exclusive case studies of successful, profitable, and scaling MSPs and MSSPs.
- Learn how to grow your business with cybersecurity-forward services.
- Join hands-on, interactive workshops, insightful panels and breakouts, and inspiring keynotes - while enjoying IT channel networking opportunities.
Acronis 公司簡介:
Acronis 是一間全球網路防護公司,專為託管服務合作夥伴 (MSP)、中小型企業 (SMB) 和企業 IT 部門,以原生方式提供整合資安、資料防護和端點管理。Acronis 解決方案效率極高,旨在用來從現代網路威脅中識別、預防、偵測、回應、修復,並復原問題,能在最短的停機時間內,確保資料的完整性,讓業務持續運作。Acronis 透過獨到的能力,為託管服務供應商提供市面上最全方位資安解決方案,以期滿足多元化、分散式 IT 環境的需求。
Acronis 是一間瑞士公司, 2003 年在新加坡正式成立,擁有 15 個全球辦事處,員工來自 50 多個國家。Acronis Cyber Protect 解決方案的服務範圍遍及全球 26 個國家,支援 150 種語言版本,共有 21,000 多間服務供應商使用這項服務,為超過 750,000 間企業提供防護。請造訪以下官網 www.acronis.com,以便深入了解。