Researchers at Barracuda observed a fourfold increase in ransomware threats last year, driven by increasingly sophisticated ransomware-as-a-service (RaaS) operations.
“The developers behind RaaS platforms often have the time, resources, and skills to invest heavily in advanced and evasive toolsets and templates,” Barracuda explains.
“The RaaS operational model also extends the pool of attackers deploying ransomware, bringing it within reach of anyone willing to lease and leverage the kits.”
Barracuda observed one incident in which attackers compromised a server, elevated privileges, and deployed ransomware within just 74 minutes.
“Cyberattacks are getting faster,” the researchers write. “Advances in security tools and strategies mean that intruders are now more easily and quickly detected and removed from the network. Threat actors have responded by accelerating their attacks.”
The researchers also highlight the growing risk of email-borne threats facilitated by phishing-as-a-service platforms.
“Endpoint threat detections cover a wide spectrum of threats, including but not limited to harmless elements, potentially unwanted applications (PUA), adware, spyware, downloaders, cryptominers, malicious documents, exploits, viruses, worms, Trojans, backdoors, rootkits, information stealers, ransomware, interactive or remote shells, lateral movements, and more,” the report says.
“The high number of detections for suspicious post-delivery email threats underscores the growing sophistication and evasive nature of email-based attacks.”
New-school security awareness training can give organizations an essential layer of defense against cyberattacks.
“Implementing effective and comprehensive security is more important than ever,” Barracuda says. “Organizations need to start with the basics. This should include robust multi-factor authentication and access controls, a solid approach to patch management and data protection, and regular cybersecurity awareness training for employees.”
KnowBe4 empowers your workforce to make smarter security decisions every day. Over 70,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
Barracuda has the story.
Here's how it works:
