Connect with us

Technology

IBM Report: Ransomware Persisted Despite Improved Detection in 2022

Published

2 years ago

on

Manufacturing Most Extorted Industry; Email Thread Hijacking Attempts Spike; Time to Ransom Moves from Months to Days

ARMONK, N.Y., Feb. 22, 2023 /PRNewswire/ — IBM (NYSE: IBM) Security today released its annual X-Force Threat Intelligence Index finding that although ransomware’s share of incidents declined only slightly (4 percentage points) from 2021 to 2022, defenders were more successful detecting and preventing ransomware. Despite this, attackers continued to innovate with the report showing the average time to complete a ransomware attack dropped from 2 months down to less than 4 days. 

According to the 2023 report, the deployment of backdoors, which allow remote access to systems, emerged as the top action by attackers last year. About 67% of those backdoor cases related to ransomware attempts, where defenders were able to detect the backdoor before ransomware was deployed. The uptick in backdoor deployments can be partially attributed to their high market value. X-Force observed threat actors selling existing backdoor access for as much as $10,000, compared to stolen credit card data, which can sell for less than $10 today.

“The shift towards detection and response has allowed defenders to disrupt adversaries earlier in the attack chain – tempering ransomware’s progression in the short term,” said Charles Henderson, Head of IBM Security X-Force. “But it’s only a matter of time before today’s backdoor problem becomes tomorrow’s ransomware crisis. Attackers always find new ways to evade detection. Good defense is no longer enough. To break free from the never-ending rat race with attackers, businesses must drive a proactive, threat-driven security strategy.”

The IBM Security X-Force Threat Intelligence Index tracks new and existing trends and attack patterns – pulling from billions of datapoints from network and endpoint devices, incident response engagements and other sources.

Some of the key findings in the 2023 report include:

Extortion: Threat Actors Go-to Method. The most common impact from cyberattacks in 2022 was extortion, which was primarily achieved through ransomware or business email compromise attacks. Europe was the most targeted region for this method, representing 44% of extortion cases observed, as threat actors sought to exploit geopolitical tensions.Cybercriminals Weaponize Email Conversations. Thread hijacking saw a significant rise in 2022, with attackers using compromised email accounts to reply within ongoing conversations posing as the original participant. X-Force observed the rate of monthly attempts increase by 100% compared to 2021 data.Legacy Exploits Still Doing the Job. The proportion of known exploits relative to vulnerabilities declined 10 percentage points from 2018 to 2022, due to the fact that the number of vulnerabilities hit another record high in 2022. The findings indicate that legacy exploits enabled older malware infections such as WannaCry and Conficker to continue to exist and spread.

Extortion Pressure Applied (Unevenly)
Cybercriminals often target the most vulnerable industries, businesses, and regions with extortion schemes, applying high psychological pressure to force victims to pay. Manufacturing was the most extorted industry in 2022, and it was the most attacked industry for the second consecutive year. Manufacturing organizations are an attractive target for extortion, given their extremely low tolerance for down time.

Ransomware is a well-known method of extortion, but threat actors are always exploring new ways to extort victims. One of the latest tactics involves making stolen data more accessible to downstream victims. By bringing customers and business partners into the mix, operators increase pressure on the breached organization. Threat actors will continue experimenting with downstream victim notifications to increase the potential costs and psychological impact of an intrusion – making it critical that businesses have a customized incident response plan that also considers the impact of an attack on downstream victims.

Thread Hijacking on the Rise
Email thread hijacking activity surged last year, with monthly attempts by threat actors doubling compared to 2021 data. Over the year, X-Force found that attackers used this tactic to deliver Emotet, Qakbot, and IcedID, malicious software that often results in ransomware infections.

With phishing being the leading cause of cyberattacks last year, and thread hijacking’s sharp rise, it’s clear that attackers are exploiting the trust placed in email. Businesses should make employees aware of thread hijacking to help reduce the risk of them falling victim.

Mind the Gap: Exploit “R&D” Lagging Vulnerabilities
The ratio of known exploits to vulnerabilities has been declining over the last few years, down 10 percentage points since 2018. Cybercriminals already have access to more than 78,000 known exploits, making it easier to exploit older, unpatched vulnerabilities. Even after 5 years, vulnerabilities leading to WannaCry infections remain a significant threat. X-Force recently reported an 800% increase in WannaCry ransomware traffic within MSS telemetry data since April 2022. The continued use of older exploits highlights the need for organizations to refine and mature vulnerability management programs, including better understanding their attack surface and risk-based prioritization of patches.

Additional findings from the 2023 report include:

Phishers “Give Up” on Credit Card Data. The number of cybercriminals targeting credit card information in phishing kits dropped 52% in one year, indicating that attackers are prioritizing personally identifiable information such as names, emails, and home addresses, which can be sold for a higher price on the dark web or used to conduct further operations.North America Felt Brunt of Energy Attacks. Energy held its spot as the 4th most attacked industry last year, as global forces continue to affect an already tumultuous global energy trade. North American energy organizations accounted for 46% of all energy attacks observed last year, a 25% increase from 2021 levels.Asia Tops the Target List. Accounting for nearly one-third of all attacks that X-Force responded to in 2022, Asia saw more cyberattacks than any other region. Manufacturing accounted for nearly half of all cases observed in Asia last year.

The report features data IBM collected globally in 2022 to deliver insightful information about the global threat landscape and inform the security community about the threats most relevant to their organizations. You can download a copy of the 2023 IBM Security X-Force Threat Intelligence Report here.

Additional sources

Read more about the report’s top findings in this IBM Security Intelligence blog.Sign up for the 2023 IBM Security X-Force Threat Intelligence Index webinar on Thursday, March 2, 2022, at 11:00 a.m. ET here.Schedule a consult with IBM Security X-Force.

About IBM Security
IBM Security helps secure the world’s largest enterprises and governments with an integrated portfolio of security products and services, infused with dynamic AI and automation capabilities. The portfolio, supported by world-renowned IBM Security X-Force® research, enables organizations to predict threats, protect data as it moves, and respond with speed and precision without holding back business innovation. worldwide security experts, IBM is trusted by thousands of organizations as their partner to assess, strategize, implement, and manage security transformations. IBM operates one of the world’s broadest security research, development, and delivery organizations, monitors 150 billion+ security events per day in more than 130 countries, and has been granted more than 10,000 security patents worldwide.

Press Contact:
IBM Security Communications
Michele Brancati
mbrancati@ibm.com

 

View original content to download multimedia:https://www.prnewswire.com/news-releases/ibm-report-ransomware-persisted-despite-improved-detection-in-2022-301752400.html

SOURCE IBM

Related Topics:
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

World’s Top Football Clubs Conclude Aspire Academy’s 10th Global Summit Under Qatar’s Desert Stars

Published

28 mins ago

on

November 13, 2024

By

DOHA, Qatar, Nov. 13, 2024 /PRNewswire/ — The 10th edition of the Aspire Academy Global Summit concluded in Qatar, bringing together leaders from 50 top football organisations worldwide.

Over two days, the summit provided a platform for exchanging groundbreaking insights on sports science, coaching techniques, and performance, with a key focus on inspiring the next generation of sporting stars.

Powerful Setting for Global Collaboration
The summit’s first day concluded with a gala dinner for guests, the evening’s highlight was a Star Chat with Italian basketball coach Sergio Scariolo, current head coach of the Spanish national basketball team. During his talk, Scariolo shared valuable coaching techniques and emphasized the importance of continual learning and building strong connections with players.

Earlier in the day the delegates had heard from Ajax Amsterdam’s Italian coach Francesco Farioli, who is also a former coach at Aspire Academy as well as French coaches Rudi Garcia and Christophe Galtier.

Reflections on Evolution in Football
Former Argentina striker Gabriel Batistuta was unable to address the summit due to unforeseen circumstances, but the event continued with a series of engaging activities.

A key session focused on the evolution of football tactics over the past decade. Gerrard Trives Guardiola from Barcelona’s Methodology Department discussed how the club’s playing style has adapted after the departures of legends like Lionel Messi and Neymar. He stressed the importance of allowing young players to express themselves.

Jose Tavares, Academy Director at Porto FC, emphasized the need to anticipate future football trends to implement changes early and highlighted the significance of emotional moments in a player’s journey as motivation.

The Future of Football Performance

Darragh Connolly, Head of Academy Performance at Juventus, highlighted the need for proper preparation of young players as academies expand. He noted that a football club’s entire structure must align to equip players for professional challenges.

Rick Cost, Director of High Performance at US Soccer, discussed the rapid rise of Artificial Intelligence and its potential to enhance coaching and performance analysis while leveraging AI wisely.

The summit featured a special appearance by Aspire Academy graduate and four-time Olympic high jump medallist Mutaz Barshim.

Valter and the Aspire Fellows: Looking Ahead to the Next Edition

Professor Valter Di Salvo, Executive Director of the 2024 Aspire Global Summit thanked the delegates, and he is looking forward to hosting the 11th edition of the Summit.

 

SOURCE Aspire Academy

Continue Reading

Technology

SE Healthcare Enhances Nurse Burnout Prevention Program® with Gamification Feature to Drive Engagement and Motivation

Published

28 mins ago

on

November 13, 2024

By

SE Healthcare, a leading provider of healthcare-focused burnout prevention solutions, is proud to announce the release of a Gamification Feature within its acclaimed Nurse Burnout Prevention Program®. This cutting-edge addition revolutionizes how healthcare organizations approach nursing education, combining interactive game design elements with targeted micro-learning to create a more engaging and rewarding experience for nurses. As burnout remains a pressing issue in healthcare, this feature arrives as a timely and transformative tool to support nurse well-being and professional development.

CHARLESTON, S.C., Nov. 12, 2024 /PRNewswire-PRWeb/ — Empowering Nurses with Gamification: Transforming Learning into Achievement

“The new gamification tools make it easy and enjoyable to track my progress,” shared one nurse using the program. “Each milestone feels like a little victory, and it’s motivating to see my achievements add up over time.”

The SE Healthcare Nurse Burnout Prevention Program® has long provided nurses with critical resources to combat burnout, including bite-sized, accessible micro-learning modules. Now, with the integration of gamification, the program is further optimized to track users’ progress through engaging milestones and celebrate achievements with badges and real-time notifications. This feature makes learning not only effective but also enjoyable, fostering a sense of accomplishment and encouraging continuous engagement.

“The addition of gamification is more than just an upgrade; it’s an efficient tool designed to inspire nurses and empower them through each step of their professional journey,” said Greg Coticchia, CEO of SE Healthcare. “We believe that by making learning more interactive and rewarding, we’re not only supporting nurses’ growth but also helping healthcare organizations build resilient, motivated teams.”

What is Gamification?

Gamification leverages game-based design elements—such as rewards, badges, and progress tracking—to turn routine educational tasks into an interactive journey. With SE Healthcare’s Gamification Feature, each step forward in a nurse’s educational journey is recognized and celebrated, driving motivation and retention. Nurses gain CME/CE credits alongside valuable recognitions, aligning professional development goals with a rewarding and positive experience.

Key Features and Benefits of SE Healthcare’s Gamification

Achievement Badges and Progress Tracking: Nurses earn digital badges as they complete various micro-learning modules, which are displayed on an updated profile page.

Benefit: Visual recognition boosts motivation, encouraging nurses to continue their learning journey and reach new milestones.

Real-Time Toast Notifications: Upon completion of each module, nurses receive a pop-up notification celebrating their accomplishment and showcasing their progress.

Benefit: Immediate, positive reinforcement cultivates productive learning habits and fosters consistent engagement.

Seamless Integration with CME/CE Credit Programs: Nurses gain essential CME/CE credits as they complete modules, making professional development a rewarding experience.

Benefit: Aligns educational and professional goals, increasing the perceived value of the Nurse Burnout Prevention Program.

Enhanced User Interface and Profile Navigation: The new profile layout allows nurses to easily navigate between learning categories and track their accomplishments.

Benefit: Simplified navigation encourages users to explore more content, enhancing their overall experience.

Building a Sense of Community and Collaboration: The Gamification Feature allows nurses to engage with peers, fostering a sense of shared achievement and community.

Benefit: Promotes a supportive environment, where nurses can celebrate achievements together, boosting morale.

Addressing Nurse Burnout with Evidence-Based Engagement

Burnout is an escalating challenge within the healthcare sector, significantly impacting retention, patient outcomes, and operational efficiency. SE Healthcare’s data-driven approach to nurse well-being has demonstrated a 35% reduction in the highest burnout levels and improved patient outcomes by supporting nursing excellence. This Gamification Feature builds on SE Healthcare’s foundational success, encouraging healthcare providers to invest in sustainable, engaging learning solutions that promote ongoing development and well-being for nurses.

“The new gamification tools make it easy and enjoyable to track my progress,” shared one nurse using the program. “Each milestone feels like a little victory, and it’s motivating to see my achievements add up over time.”

Who Should Use the Gamification Feature?

Nurse Leaders and Educators can utilize this feature to make learning enjoyable and accessible, fostering long-term engagement in professional development.Healthcare Administrators gain insights into participation rates and content completion, providing valuable metrics to enhance workforce wellness strategies.

Why Gamification Matters in Combating Burnout

High burnout rates are associated with increased turnover, reduced patient satisfaction, and greater operational costs. By creating a rewarding and interactive learning environment, SE Healthcare’s Gamification Feature tackles these challenges head-on, helping healthcare organizations to improve nurse retention, support professional satisfaction, and ultimately deliver better patient care.

About SE Healthcare

SE Healthcare is a leader in providing innovative burnout prevention solutions tailored to the unique challenges of healthcare. With programs designed to empower healthcare professionals, SE Healthcare equips organizations to improve workforce well-being and enhance patient outcomes. Learn more about how SE Healthcare is driving the future of nurse well-being at www.SEHealthcareSolutions.com.

Ready to Experience the Power of Gamification?

For more information or to schedule a demo of the Nurse Burnout Prevention Program® Gamification Feature, contact SE Healthcare today.

Media Contact

Jillian Tice, SE Healthcare, 1 7176693893, jillian@sehqc.com, https://www.sehealthcaresolutions.com/

View original content to download multimedia:https://www.prweb.com/releases/se-healthcare-enhances-nurse-burnout-prevention-program-with-gamification-feature-to-drive-engagement-and-motivation-302303224.html

SOURCE SE Healthcare

Continue Reading

Technology

East Side Games Group to Announce Third Quarter 2024 Financial Results

Published

28 mins ago

on

November 13, 2024

By

VANCOUVER, BC, Nov. 12, 2024 /CNW/ – East Side Games Group (TSX: EAGR) (OTC: EAGRF) (“ESGG” or the “Company”), Canada’s leading free-to-play mobile game group, will release its third-quarter 2024 financial results and business outlook on its investor relations website https://eastsidegamesgroup.com/investors/financial-information on Thursday, November 14th, 2024, at approximately 2:00 p.m. Pacific Time.

Questions can be submitted to IR@eastsidegamesgroup.com.

ABOUT EAST SIDE GAMES GROUP

East Side Games Group is a leading free-to-play mobile game group, creating engaging games that produce enduring player loyalty. Our studio groups entrepreneurial culture is anchored in creativity, execution, and growth through licensing of our proprietary Game Kit software platform that enables professional game developers to greatly increase the efficiency and effectiveness of game creation in addition to organic growth through a diverse portfolio of original and licensed IP mobile games that include: The Office: Somehow We Manage, Star Trek: Lower Decks – The Badgey Directive, Doctor Who: Lost in Time, RuPaul’s Drag Race Superstar, Trailer Park Boys Grea$y Money, Bud Farm Idle Tycoon, Cheech & Chong Bud Farm, AEW: Rise to the Top and Power Rangers: Mighty Force.

We are headquartered in Vancouver, Canada and our games are available worldwide on the App Store and Google Play. For further information, please visit: www.eastsidegamesgroup.com and join our online community at LinkedIn.

Additional information about the Company is available under East Side Games Group at www.sedar.com.

Forward-looking Information

Certain statements in this release are forward-looking statements, which reflect the expectations of management regarding the proposed transactions described herein. Forward-looking statements consist of statements that are not purely historical, including any statements regarding beliefs, plans, expectations or intentions regarding the future. Such statements are subject to risks and uncertainties that may cause actual results, performance or developments to differ materially from those contained in the statements. No assurance can be given that any of the events anticipated by the forward-looking statements will occur or, if they do occur, what benefits the Company will obtain from them. These forward-looking statements reflect management’s current views and are based on certain expectations, estimates and assumptions which may prove to be incorrect. A number of risks and uncertainties could cause our actual results to differ materially from those expressed or implied by the forward-looking statements, including factors beyond the Company’s control. These forward-looking statements are made as of the date of this news release.

SOURCE East Side Games Group Inc.

Continue Reading

Trending