According to new research by an academic group, nation-state cyberattacks are becoming more common and varied. The report analyzed over 200 cybersecurity incidents linked with nation-state actors since 2009 and disclosed that there has been a 100% rise in nation-state incidents between 2017 and 2020.
What’s in the report?
According to the University of Surrey research project, enterprises are one of the most common targets (35%), followed by the cyber defense industry (25%), media (14%), government (12%), and critical infrastructure (10%).
- Around 64% of the expert panel said that 2020 experienced a very worrying escalation in tensions, with 75% saying that COVID-19 presented an opportunity for nation-states to exploit.
- Supply chain attacks saw a rise of 78% in 2019, and from 2017 to 2020, there were over 27 separate supply chain attacks that could be connected with nation-state actors.
- Over 40% of incidents analyzed involved a cyberattack upon assets having a physical and digital component (e.g. an attack on an energy plant), a phenomenon designated as hybridization.
- In addition, nation-state actors focused their attacks to obtain COVID-19-related intellectual property data.
- The nation-states are stock-piling zero-day vulnerabilities, while 10% – 15% of darknet vendor sales go to unusual purchasers, or those acting on behalf of nation-state actors.
The Web of Profit
One of the major findings in the report is that nation-states are now profiting from the Web of Profit.
- Two-thirds (65%) of the expert panel think nation-states are making money from cybercrime, while 58% believe that nation-states are recruiting cybercriminals to perform cyberattacks.
- Around 20% of the total incidents involved the use of sophisticated, custom-made weapons, while 50% involved low-budget cyber tools.
- Moreover, 50% of the tools were used for surveillance, 15% enabled network incursion and positioning, 14% were used for destruction, and only 8% for data exfiltration.
Conclusion
The growing attack surface of the cyber world has led to the expansion of the cybercrime economy that is booming every year. In addition, nation-state actors are now becoming more sophisticated and using novel tactics. Fighting against such global threats requires international consensus among governments and several strong initiatives by security agencies.
Source: https://cyware.com/news/nation-state-attackers-taking-over-global-cyber-realm-6fa1c3c0
